GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-07-15 01:05:03
Windows 5.1.2600 Service Pack 3


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwAdjustPrivilegesToken [0xB684FF68]
SSDT            8A961218                                                                                                          ZwAllocateVirtualMemory
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwClose [0xB63B16B8]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwConnectPort [0xB684F472]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwCreateFile [0xB684FB0C]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwCreateKey [0xB63B1574]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwCreatePort [0xB684F150]
SSDT            8A99A638                                                                                                          ZwCreateProcess
SSDT            8A99A5C0                                                                                                          ZwCreateProcessEx
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwCreateSection [0xB68511F0]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwCreateSymbolicLinkObject [0xB68514C8]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwCreateThread [0xB684ED16]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwDeleteKey [0xB685014E]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwDeleteValueKey [0xB63B1A52]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwDuplicateObject [0xB63B114C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwLoadDriver [0xB6850E72]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwMakeTemporaryObject [0xB684F6F6]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwOpenFile [0xB684FD50]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwOpenKey [0xB63B164E]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwOpenProcess [0xB63B108C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwOpenSection [0xB684F986]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwOpenThread [0xB63B10F0]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwQueryValueKey [0xB63B176E]
SSDT            8A961290                                                                                                          ZwQueueApcThread
SSDT            8A99D020                                                                                                          ZwReadVirtualMemory
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwRenameKey [0xB68508AA]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwRequestWaitReplyPort [0xB684F26E]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwRestoreKey [0xB63B172E]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwSecureConnectPort [0xB6850C0E]
SSDT            8A961380                                                                                                          ZwSetContextThread
SSDT            8A9680B8                                                                                                          ZwSetInformationKey
SSDT            8A997370                                                                                                          ZwSetInformationProcess
SSDT            8A984108                                                                                                          ZwSetInformationThread
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwSetSystemInformation [0xB6851020]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwSetValueKey [0xB63B18AE]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwShutdownSystem [0xB684F690]
SSDT            8A928A50                                                                                                          ZwSuspendProcess
SSDT            8A961308                                                                                                          ZwSuspendThread
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwSystemDebugControl [0xB684F87A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwTerminateProcess [0xB684F01A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                        ZwTerminateThread [0xB684EEE8]
SSDT            8A9611A0                                                                                                          ZwWriteVirtualMemory

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!ZwCallbackReturn + 2C7C                                                                              80504518 12 Bytes  [50, F1, 84, B6, 38, A6, 99, ...]
.text           ntkrnlpa.exe!ZwCallbackReturn + 2FB8                                                                              80504854 12 Bytes  [50, 8A, 92, 8A, 08, 13, 96, ...]

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtAllocateVirtualMemory                                 7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtClose                                                 7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtCreateFile                                            7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtCreateProcess                                         7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtCreateProcessEx                                       7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtDeleteFile                                            7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtFreeVirtualMemory                                     7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtLoadDriver                                            7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtOpenFile                                              7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtProtectVirtualMemory                                  7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtSetInformationProcess                                 7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtUnloadDriver                                          7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!NtWriteVirtualMemory                                    7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!RtlAllocateHeap                                         7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!LdrLoadDll                                              7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!LdrUnloadDll                                            7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ntdll.dll!LdrGetProcedureAddress                                  7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CreateFileA                                          7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!VirtualProtect                                       7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!LoadLibraryExW                                       7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!LoadLibraryExA                                       7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!LoadLibraryA                                         7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CreateProcessW                                       7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CreateProcessA                                       7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!GetProcAddress                                       7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!LoadLibraryW                                         7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!GetModuleHandleA                                     7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!GetModuleHandleW                                     7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CreateFileW                                          7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!MoveFileWithProgressW                                7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!MoveFileW                                            7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!OpenFile                                             7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!OpenFile + 3                                         7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CopyFileExW                                          7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CopyFileA                                            7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CopyFileW                                            7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!DeleteFileA                                          7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!DeleteFileW                                          7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!MoveFileExW                                          7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!MoveFileA                                            7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!MoveFileWithProgressA                                7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!MoveFileExA                                          7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!CopyFileExA                                          7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!WinExec                                              7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] kernel32.dll!LoadModule                                           7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ADVAPI32.dll!OpenServiceW                                         77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ADVAPI32.dll!OpenServiceA                                         77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ADVAPI32.dll!CreateServiceA                                       77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ADVAPI32.dll!CreateServiceW                                       77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] USER32.dll!EndTask                                                7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] WININET.dll!InternetConnectA                                      3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] WININET.dll!InternetConnectW                                      3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ole32.dll!CoCreateInstanceEx                                      77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] ole32.dll!CoGetClassObject                                        775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] SHELL32.dll!ShellExecuteExW                                       7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] SHELL32.dll!ShellExecuteEx                                        7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] SHELL32.dll!ShellExecuteA                                         7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jusched.exe[456] SHELL32.dll!ShellExecuteW                                         7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtAllocateVirtualMemory                                            7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtClose                                                            7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtCreateFile                                                       7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtCreateProcess                                                    7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtCreateProcessEx                                                  7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtDeleteFile                                                       7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtFreeVirtualMemory                                                7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtLoadDriver                                                       7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtOpenFile                                                         7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtProtectVirtualMemory                                             7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtSetInformationProcess                                            7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtUnloadDriver                                                     7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!NtWriteVirtualMemory                                               7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!RtlAllocateHeap                                                    7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!LdrLoadDll                                                         7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!LdrUnloadDll                                                       7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ntdll.dll!LdrGetProcedureAddress                                             7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CreateFileA                                                     7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!VirtualProtect                                                  7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!LoadLibraryExW                                                  7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!LoadLibraryExA                                                  7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!LoadLibraryA                                                    7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CreateProcessW                                                  7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CreateProcessA                                                  7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!GetProcAddress                                                  7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!LoadLibraryW                                                    7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!GetModuleHandleA                                                7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!GetModuleHandleW                                                7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CreateFileW                                                     7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!MoveFileWithProgressW                                           7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!MoveFileW                                                       7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!OpenFile                                                        7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!OpenFile + 3                                                    7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CopyFileExW                                                     7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CopyFileA                                                       7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CopyFileW                                                       7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!DeleteFileA                                                     7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!DeleteFileW                                                     7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!MoveFileExW                                                     7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!MoveFileA                                                       7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!MoveFileWithProgressA                                           7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!MoveFileExA                                                     7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!CopyFileExA                                                     7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!WinExec                                                         7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] kernel32.dll!LoadModule                                                      7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ADVAPI32.dll!OpenServiceW                                                    77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ADVAPI32.dll!OpenServiceA                                                    77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ADVAPI32.dll!CreateServiceA                                                  77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ADVAPI32.dll!CreateServiceW                                                  77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] USER32.dll!EndTask                                                           7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ole32.dll!CoCreateInstanceEx                                                 77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] ole32.dll!CoGetClassObject                                                   775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] SHELL32.dll!ShellExecuteExW                                                  7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] SHELL32.dll!ShellExecuteEx                                                   7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] SHELL32.dll!ShellExecuteA                                                    7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\spoolsv.exe[660] SHELL32.dll!ShellExecuteW                                                    7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\services.exe[724] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!LdrLoadDll                                                           7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!LdrUnloadDll                                                         7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ntdll.dll!LdrGetProcedureAddress                                               7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!OpenFile                                                          7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!OpenFile + 3                                                      7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!WinExec                                                           7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ADVAPI32.dll!OpenServiceW                                                      77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ADVAPI32.dll!OpenServiceA                                                      77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ADVAPI32.dll!CreateServiceA                                                    77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ADVAPI32.dll!CreateServiceW                                                    77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] USER32.dll!EndTask                                                             7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] WS2_32.dll!WSASocketW                                                          71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] WS2_32.dll!WSASocketA                                                          71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ole32.dll!CoCreateInstanceEx                                                   77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] ole32.dll!CoGetClassObject                                                     775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] SHELL32.dll!ShellExecuteExW                                                    7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] SHELL32.dll!ShellExecuteEx                                                     7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] SHELL32.dll!ShellExecuteA                                                      7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\lsass.exe[736] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtAllocateVirtualMemory             7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtClose                             7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtCreateFile                        7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtCreateProcess                     7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtCreateProcessEx                   7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtDeleteFile                        7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtFreeVirtualMemory                 7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtLoadDriver                        7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtOpenFile                          7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtProtectVirtualMemory              7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtSetInformationProcess             7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtUnloadDriver                      7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!NtWriteVirtualMemory                7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!RtlAllocateHeap                     7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!LdrLoadDll                          7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!LdrUnloadDll                        7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ntdll.dll!LdrGetProcedureAddress              7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CreateFileA                      7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!VirtualProtect                   7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!LoadLibraryExW                   7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!LoadLibraryExA                   7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!LoadLibraryA                     7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CreateProcessW                   7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CreateProcessA                   7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!GetProcAddress                   7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!LoadLibraryW                     7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!GetModuleHandleA                 7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!GetModuleHandleW                 7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CreateFileW                      7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!MoveFileWithProgressW            7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!MoveFileW                        7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!OpenFile                         7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!OpenFile + 3                     7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CopyFileExW                      7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CopyFileA                        7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CopyFileW                        7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!DeleteFileA                      7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!DeleteFileW                      7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!MoveFileExW                      7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!MoveFileA                        7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!MoveFileWithProgressA            7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!MoveFileExA                      7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!CopyFileExA                      7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!WinExec                          7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] kernel32.dll!LoadModule                       7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ADVAPI32.dll!OpenServiceW                     77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ADVAPI32.dll!OpenServiceA                     77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ADVAPI32.dll!CreateServiceA                   77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ADVAPI32.dll!CreateServiceW                   77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] USER32.dll!EndTask                            7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] WS2_32.dll!WSASocketW                         71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] WS2_32.dll!WSASocketA                         71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] SHELL32.dll!ShellExecuteExW                   7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] SHELL32.dll!ShellExecuteEx                    7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] SHELL32.dll!ShellExecuteA                     7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] SHELL32.dll!ShellExecuteW                     7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ole32.dll!CoCreateInstanceEx                  77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] ole32.dll!CoGetClassObject                    775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] WININET.dll!InternetConnectA                  3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\WRConsumerService.exe[904] WININET.dll!InternetConnectW                  3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtAllocateVirtualMemory                                            7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtClose                                                            7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtCreateFile                                                       7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtCreateProcess                                                    7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtCreateProcessEx                                                  7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtDeleteFile                                                       7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtFreeVirtualMemory                                                7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtLoadDriver                                                       7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtOpenFile                                                         7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtProtectVirtualMemory                                             7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtSetInformationProcess                                            7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtUnloadDriver                                                     7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!NtWriteVirtualMemory                                               7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!RtlAllocateHeap                                                    7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!LdrLoadDll                                                         7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!LdrUnloadDll                                                       7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ntdll.dll!LdrGetProcedureAddress                                             7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CreateFileA                                                     7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!VirtualProtect                                                  7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!LoadLibraryExW                                                  7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!LoadLibraryExA                                                  7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!LoadLibraryA                                                    7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CreateProcessW                                                  7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CreateProcessA                                                  7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!GetProcAddress                                                  7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!LoadLibraryW                                                    7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!GetModuleHandleA                                                7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!GetModuleHandleW                                                7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CreateFileW                                                     7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!MoveFileWithProgressW                                           7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!MoveFileW                                                       7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!OpenFile                                                        7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!OpenFile + 3                                                    7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CopyFileExW                                                     7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CopyFileA                                                       7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CopyFileW                                                       7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!DeleteFileA                                                     7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!DeleteFileW                                                     7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!MoveFileExW                                                     7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!MoveFileA                                                       7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!MoveFileWithProgressA                                           7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!MoveFileExA                                                     7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!CopyFileExA                                                     7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!WinExec                                                         7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] kernel32.dll!LoadModule                                                      7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ADVAPI32.dll!OpenServiceW                                                    77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ADVAPI32.dll!OpenServiceA                                                    77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ADVAPI32.dll!CreateServiceA                                                  77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ADVAPI32.dll!CreateServiceW                                                  77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] USER32.dll!EndTask                                                           7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ole32.dll!CoCreateInstanceEx                                                 77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] ole32.dll!CoGetClassObject                                                   775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] SHELL32.dll!ShellExecuteExW                                                  7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] SHELL32.dll!ShellExecuteEx                                                   7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] SHELL32.dll!ShellExecuteA                                                    7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[928] SHELL32.dll!ShellExecuteW                                                    7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1000] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtAllocateVirtualMemory             7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtClose                             7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtCreateFile                        7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtCreateProcess                     7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtCreateProcessEx                   7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtDeleteFile                        7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtFreeVirtualMemory                 7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtLoadDriver                        7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtOpenFile                          7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtProtectVirtualMemory              7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtSetInformationProcess             7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtUnloadDriver                      7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!NtWriteVirtualMemory                7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!RtlAllocateHeap                     7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!LdrLoadDll                          7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!LdrUnloadDll                        7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ntdll.dll!LdrGetProcedureAddress              7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CreateFileA                      7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!VirtualProtect                   7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!LoadLibraryExW                   7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!LoadLibraryExA                   7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!LoadLibraryA                     7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CreateProcessW                   7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CreateProcessA                   7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!GetProcAddress                   7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!LoadLibraryW                     7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!GetModuleHandleA                 7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!GetModuleHandleW                 7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CreateFileW                      7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!MoveFileWithProgressW            7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!MoveFileW                        7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!OpenFile                         7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!OpenFile + 3                     7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CopyFileExW                      7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CopyFileA                        7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CopyFileW                        7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!DeleteFileA                      7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!DeleteFileW                      7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!MoveFileExW                      7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!MoveFileA                        7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!MoveFileWithProgressA            7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!MoveFileExA                      7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!CopyFileExA                      7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!WinExec                          7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] kernel32.dll!LoadModule                       7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ADVAPI32.dll!OpenServiceW                     77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ADVAPI32.dll!OpenServiceA                     77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ADVAPI32.dll!CreateServiceA                   77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ADVAPI32.dll!CreateServiceW                   77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] USER32.dll!EndTask                            7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] SHELL32.dll!ShellExecuteExW                   7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] SHELL32.dll!ShellExecuteEx                    7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] SHELL32.dll!ShellExecuteA                     7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] SHELL32.dll!ShellExecuteW                     7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ole32.dll!CoCreateInstanceEx                  77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] ole32.dll!CoGetClassObject                    775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] WS2_32.dll!WSASocketW                         71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe[1060] WS2_32.dll!WSASocketA                         71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1096] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtAllocateVirtualMemory                   7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtClose                                   7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtCreateFile                              7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtCreateProcess                           7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtCreateProcessEx                         7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtDeleteFile                              7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtFreeVirtualMemory                       7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtLoadDriver                              7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtOpenFile                                7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtProtectVirtualMemory                    7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtSetInformationProcess                   7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtUnloadDriver                            7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!NtWriteVirtualMemory                      7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!RtlAllocateHeap                           7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!LdrLoadDll                                7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!LdrUnloadDll                              7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ntdll.dll!LdrGetProcedureAddress                    7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CreateFileA                            7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!VirtualProtect                         7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!LoadLibraryExW                         7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!LoadLibraryExA                         7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!LoadLibraryA                           7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CreateProcessW                         7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CreateProcessA                         7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!GetProcAddress                         7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!LoadLibraryW                           7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!GetModuleHandleA                       7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!GetModuleHandleW                       7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CreateFileW                            7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!MoveFileWithProgressW                  7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!MoveFileW                              7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!OpenFile                               7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!OpenFile + 3                           7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CopyFileExW                            7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CopyFileA                              7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CopyFileW                              7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!DeleteFileA                            7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!DeleteFileW                            7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!MoveFileExW                            7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!MoveFileA                              7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!MoveFileWithProgressA                  7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!MoveFileExA                            7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!CopyFileExA                            7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!WinExec                                7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] kernel32.dll!LoadModule                             7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] USER32.dll!EndTask                                  7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ADVAPI32.dll!OpenServiceW                           77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ADVAPI32.dll!OpenServiceA                           77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ADVAPI32.dll!CreateServiceA                         77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ADVAPI32.dll!CreateServiceW                         77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ole32.dll!CoCreateInstanceEx                        77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] ole32.dll!CoGetClassObject                          775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] WS2_32.dll!WSASocketW                               71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe[1212] WS2_32.dll!WSASocketA                               71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1224] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1276] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtAllocateVirtualMemory                       7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtClose                                       7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtCreateFile                                  7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtCreateProcess                               7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtCreateProcessEx                             7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtDeleteFile                                  7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtFreeVirtualMemory                           7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtLoadDriver                                  7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtOpenFile                                    7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtProtectVirtualMemory                        7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtSetInformationProcess                       7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtUnloadDriver                                7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!NtWriteVirtualMemory                          7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!RtlAllocateHeap                               7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!LdrLoadDll                                    7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!LdrUnloadDll                                  7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ntdll.dll!LdrGetProcedureAddress                        7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CreateFileA                                7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!VirtualProtect                             7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!LoadLibraryExW                             7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!LoadLibraryExA                             7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!LoadLibraryA                               7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CreateProcessW                             7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CreateProcessA                             7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!GetProcAddress                             7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!LoadLibraryW                               7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!GetModuleHandleA                           7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!GetModuleHandleW                           7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CreateFileW                                7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!MoveFileWithProgressW                      7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!MoveFileW                                  7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!OpenFile                                   7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!OpenFile + 3                               7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CopyFileExW                                7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CopyFileA                                  7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CopyFileW                                  7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!DeleteFileA                                7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!DeleteFileW                                7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!MoveFileExW                                7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!MoveFileA                                  7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!MoveFileWithProgressA                      7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!MoveFileExA                                7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!CopyFileExA                                7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!WinExec                                    7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] kernel32.dll!LoadModule                                 7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] USER32.dll!EndTask                                      7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ADVAPI32.dll!OpenServiceW                               77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ADVAPI32.dll!OpenServiceA                               77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ADVAPI32.dll!CreateServiceA                             77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] ADVAPI32.dll!CreateServiceW                             77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] WS2_32.dll!WSASocketW                                   71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[1364] WS2_32.dll!WSASocketA                                   71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtAllocateVirtualMemory                        7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtClose                                        7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtCreateFile                                   7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtCreateProcess                                7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtCreateProcessEx                              7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtDeleteFile                                   7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtFreeVirtualMemory                            7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtLoadDriver                                   7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtOpenFile                                     7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtProtectVirtualMemory                         7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtSetInformationProcess                        7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtUnloadDriver                                 7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!NtWriteVirtualMemory                           7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!RtlAllocateHeap                                7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!LdrLoadDll                                     7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!LdrUnloadDll                                   7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ntdll.dll!LdrGetProcedureAddress                         7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CreateFileA                                 7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!VirtualProtect                              7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!LoadLibraryExW                              7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!LoadLibraryExA                              7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!LoadLibraryA                                7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CreateProcessW                              7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CreateProcessA                              7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!GetProcAddress                              7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!LoadLibraryW                                7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!GetModuleHandleA                            7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!GetModuleHandleW                            7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CreateFileW                                 7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!MoveFileWithProgressW                       7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!MoveFileW                                   7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!OpenFile                                    7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!OpenFile + 3                                7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CopyFileExW                                 7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CopyFileA                                   7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CopyFileW                                   7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!DeleteFileA                                 7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!DeleteFileW                                 7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!MoveFileExW                                 7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!MoveFileA                                   7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!MoveFileWithProgressA                       7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!MoveFileExA                                 7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!CopyFileExA                                 7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!WinExec                                     7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] kernel32.dll!LoadModule                                  7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ADVAPI32.dll!OpenServiceW                                77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ADVAPI32.dll!OpenServiceA                                77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ADVAPI32.dll!CreateServiceA                              77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ADVAPI32.dll!CreateServiceW                              77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] USER32.dll!EndTask                                       7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] WS2_32.dll!WSASocketW                                    71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] WS2_32.dll!WSASocketA                                    71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ole32.dll!CoCreateInstanceEx                             77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashServ.exe[1528] ole32.dll!CoGetClassObject                               775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtAllocateVirtualMemory   7C90CF6E 5 Bytes  JMP 00371950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtClose                   7C90CFEE 5 Bytes  JMP 00378B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtCreateFile              7C90D0AE 5 Bytes  JMP 003718D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtCreateProcess           7C90D14E 5 Bytes  JMP 00371890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtCreateProcessEx         7C90D15E 5 Bytes  JMP 003719B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtDeleteFile              7C90D23E 5 Bytes  JMP 00371910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtFreeVirtualMemory       7C90D38E 5 Bytes  JMP 00371A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtLoadDriver              7C90D46E 5 Bytes  JMP 00371970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtOpenFile                7C90D59E 5 Bytes  JMP 003718F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtProtectVirtualMemory    7C90D6EE 5 Bytes  JMP 00371930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtSetInformationProcess   7C90DC9E 5 Bytes  JMP 003719D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtUnloadDriver            7C90DEBE 5 Bytes  JMP 00371990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!NtWriteVirtualMemory      7C90DFAE 5 Bytes  JMP 003718B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!RtlAllocateHeap           7C9100C4 5 Bytes  JMP 00371A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!LdrLoadDll                7C9163C3 5 Bytes  JMP 00374550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!LdrUnloadDll              7C91738B 5 Bytes  JMP 00378A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ntdll.dll!LdrGetProcedureAddress    7C917EA8 5 Bytes  JMP 003719F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CreateFileA            7C801A28 5 Bytes  JMP 00371B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!VirtualProtect         7C801AD4 5 Bytes  JMP 00371D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!LoadLibraryExW         7C801AF5 7 Bytes  JMP 00371AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!LoadLibraryExA         7C801D53 5 Bytes  JMP 00371AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!LoadLibraryA           7C801D7B 5 Bytes  JMP 00371D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CreateProcessW         7C802336 5 Bytes  JMP 00371A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CreateProcessA         7C80236B 5 Bytes  JMP 00371A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!GetProcAddress         7C80AE40 5 Bytes  JMP 00371A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!LoadLibraryW           7C80AEEB 5 Bytes  JMP 00371D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!GetModuleHandleA       7C80B741 5 Bytes  JMP 00371CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!GetModuleHandleW       7C80E4DD 5 Bytes  JMP 00371D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CreateFileW            7C810800 5 Bytes  JMP 00371B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!MoveFileWithProgressW  7C81F72E 5 Bytes  JMP 00371C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!MoveFileW              7C821261 5 Bytes  JMP 00371C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!OpenFile               7C821982 2 Bytes  JMP 00371B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!OpenFile + 3           7C821985 2 Bytes  [B5, 83] {MOV CH, 0x83}
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CopyFileExW            7C827B32 7 Bytes  JMP 00371BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CopyFileA              7C8286EE 5 Bytes  JMP 00371B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CopyFileW              7C82F87B 5 Bytes  JMP 00371B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!DeleteFileA            7C831EDD 5 Bytes  JMP 00371CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!DeleteFileW            7C831F63 5 Bytes  JMP 00371CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!MoveFileExW            7C83568B 5 Bytes  JMP 00371C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!MoveFileA              7C835EBF 5 Bytes  JMP 00371BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!MoveFileWithProgressA  7C835EDE 5 Bytes  JMP 00371C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!MoveFileExA            7C85E49B 5 Bytes  JMP 00371C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!CopyFileExA            7C85F39C 5 Bytes  JMP 00371BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!WinExec                7C86250D 5 Bytes  JMP 00371D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] kernel32.dll!LoadModule             7C86261E 5 Bytes  JMP 00371AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ADVAPI32.dll!OpenServiceW           77DE6FFD 7 Bytes  JMP 00371480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ADVAPI32.dll!OpenServiceA           77DF4C66 7 Bytes  JMP 00371640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ADVAPI32.dll!CreateServiceA         77E37211 7 Bytes  JMP 00371000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ADVAPI32.dll!CreateServiceW         77E373A9 7 Bytes  JMP 00371250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] USER32.dll!EndTask                  7E45A0A5 5 Bytes  JMP 00378700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] WS2_32.dll!WSASocketW               71AB404E 7 Bytes  JMP 00371E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] WS2_32.dll!WSASocketA               71AB8B6A 3 Bytes  JMP 00371E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] WS2_32.dll!WSASocketA + 4           71AB8B6E 1 Byte  [8E]
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] WININET.dll!InternetConnectA        3D94DF8E 5 Bytes  JMP 00371E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] WININET.dll!InternetConnectW        3D94F942 5 Bytes  JMP 00371E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ole32.dll!CoCreateInstanceEx        77500526 5 Bytes  JMP 00378450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] ole32.dll!CoGetClassObject          775156C5 5 Bytes  JMP 00378590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] SHELL32.dll!ShellExecuteExW         7CA0996B 5 Bytes  JMP 00371E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] SHELL32.dll!ShellExecuteEx          7CA40EB5 5 Bytes  JMP 00371DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] SHELL32.dll!ShellExecuteA           7CA411E0 5 Bytes  JMP 00371DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] SHELL32.dll!ShellExecuteW           7CAB5D48 3 Bytes  JMP 00371DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[1580] SHELL32.dll!ShellExecuteW + 4       7CAB5D4C 1 Byte  [83]
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtAllocateVirtualMemory                                                   7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtClose                                                                   7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtCreateFile                                                              7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtCreateProcess                                                           7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtCreateProcessEx                                                         7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtDeleteFile                                                              7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtFreeVirtualMemory                                                       7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtLoadDriver                                                              7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtOpenFile                                                                7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtProtectVirtualMemory                                                    7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtSetInformationProcess                                                   7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtUnloadDriver                                                            7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!NtWriteVirtualMemory                                                      7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!RtlAllocateHeap                                                           7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!LdrLoadDll                                                                7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!LdrUnloadDll                                                              7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ntdll.dll!LdrGetProcedureAddress                                                    7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CreateFileA                                                            7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!VirtualProtect                                                         7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!LoadLibraryExW                                                         7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!LoadLibraryExA                                                         7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!LoadLibraryA                                                           7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CreateProcessW                                                         7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CreateProcessA                                                         7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!LoadLibraryW                                                           7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!GetModuleHandleA                                                       7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!GetModuleHandleW                                                       7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CreateFileW                                                            7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!MoveFileWithProgressW                                                  7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!MoveFileW                                                              7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!OpenFile                                                               7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!OpenFile + 3                                                           7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CopyFileExW                                                            7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CopyFileA                                                              7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CopyFileW                                                              7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!DeleteFileA                                                            7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!DeleteFileW                                                            7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!MoveFileExW                                                            7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!MoveFileA                                                              7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!MoveFileWithProgressA                                                  7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!MoveFileExA                                                            7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!CopyFileExA                                                            7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!WinExec                                                                7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] kernel32.dll!LoadModule                                                             7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ADVAPI32.dll!OpenServiceW                                                           77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ADVAPI32.dll!OpenServiceA                                                           77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ADVAPI32.dll!CreateServiceA                                                         77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ADVAPI32.dll!CreateServiceW                                                         77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] USER32.dll!EndTask                                                                  7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ole32.dll!CoCreateInstanceEx                                                        77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] ole32.dll!CoGetClassObject                                                          775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] WININET.dll!InternetConnectA                                                        3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] WININET.dll!InternetConnectW                                                        3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] SHELL32.dll!ShellExecuteExW                                                         7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] SHELL32.dll!ShellExecuteEx                                                          7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] SHELL32.dll!ShellExecuteA                                                           7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\Explorer.EXE[1688] SHELL32.dll!ShellExecuteW                                                           7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[1816] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtAllocateVirtualMemory                                                    7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtClose                                                                    7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtCreateFile                                                               7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtCreateProcess                                                            7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtCreateProcessEx                                                          7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtDeleteFile                                                               7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtFreeVirtualMemory                                                        7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtLoadDriver                                                               7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtOpenFile                                                                 7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtProtectVirtualMemory                                                     7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtSetInformationProcess                                                    7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtUnloadDriver                                                             7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!NtWriteVirtualMemory                                                       7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!RtlAllocateHeap                                                            7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!LdrLoadDll                                                                 7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!LdrUnloadDll                                                               7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ntdll.dll!LdrGetProcedureAddress                                                     7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CreateFileA                                                             7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!VirtualProtect                                                          7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!LoadLibraryExW                                                          7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!LoadLibraryExA                                                          7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!LoadLibraryA                                                            7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CreateProcessW                                                          7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CreateProcessA                                                          7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!GetProcAddress                                                          7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!LoadLibraryW                                                            7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!GetModuleHandleA                                                        7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!GetModuleHandleW                                                        7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CreateFileW                                                             7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!MoveFileWithProgressW                                                   7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!MoveFileW                                                               7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!OpenFile                                                                7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!OpenFile + 3                                                            7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CopyFileExW                                                             7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CopyFileA                                                               7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CopyFileW                                                               7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!DeleteFileA                                                             7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!DeleteFileW                                                             7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!MoveFileExW                                                             7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!MoveFileA                                                               7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!MoveFileWithProgressA                                                   7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!MoveFileExA                                                             7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!CopyFileExA                                                             7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!WinExec                                                                 7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] kernel32.dll!LoadModule                                                              7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ADVAPI32.dll!OpenServiceW                                                            77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ADVAPI32.dll!OpenServiceA                                                            77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ADVAPI32.dll!CreateServiceA                                                          77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ADVAPI32.dll!CreateServiceW                                                          77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ole32.dll!CoCreateInstanceEx                                                         77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] ole32.dll!CoGetClassObject                                                           775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] USER32.dll!EndTask                                                                   7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] SHELL32.dll!ShellExecuteExW                                                          7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] SHELL32.dll!ShellExecuteEx                                                           7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] SHELL32.dll!ShellExecuteA                                                            7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\RTHDCPL.EXE[1880] SHELL32.dll!ShellExecuteW                                                            7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtAllocateVirtualMemory                            7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtClose                                            7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtCreateFile                                       7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtCreateProcess                                    7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtCreateProcessEx                                  7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtDeleteFile                                       7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtFreeVirtualMemory                                7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtLoadDriver                                       7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtOpenFile                                         7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtProtectVirtualMemory                             7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtSetInformationProcess                            7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtUnloadDriver                                     7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!NtWriteVirtualMemory                               7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!RtlAllocateHeap                                    7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!LdrLoadDll                                         7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!LdrUnloadDll                                       7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ntdll.dll!LdrGetProcedureAddress                             7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CreateFileA                                     7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!VirtualProtect                                  7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!LoadLibraryExW                                  7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!LoadLibraryExA                                  7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!LoadLibraryA                                    7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CreateProcessW                                  7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CreateProcessA                                  7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!GetProcAddress                                  7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!LoadLibraryW                                    7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!GetModuleHandleA                                7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!GetModuleHandleW                                7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CreateFileW                                     7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!MoveFileWithProgressW                           7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!MoveFileW                                       7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!OpenFile                                        7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!OpenFile + 3                                    7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CopyFileExW                                     7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CopyFileA                                       7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CopyFileW                                       7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!DeleteFileA                                     7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!DeleteFileW                                     7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!MoveFileExW                                     7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!MoveFileA                                       7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!MoveFileWithProgressA                           7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!MoveFileExA                                     7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!CopyFileExA                                     7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!WinExec                                         7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] kernel32.dll!LoadModule                                      7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ADVAPI32.DLL!OpenServiceW                                    77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ADVAPI32.DLL!OpenServiceA                                    77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ADVAPI32.DLL!CreateServiceA                                  77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] ADVAPI32.DLL!CreateServiceW                                  77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] USER32.dll!EndTask                                           7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] SHELL32.DLL!ShellExecuteExW                                  7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] SHELL32.DLL!ShellExecuteEx                                   7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] SHELL32.DLL!ShellExecuteA                                    7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] SHELL32.DLL!ShellExecuteW                                    7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] OLE32.DLL!CoCreateInstanceEx                                 77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\Six Engine\SixEngine.exe[1900] OLE32.DLL!CoGetClassObject                                   775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtAllocateVirtualMemory                                   7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtClose                                                   7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtCreateFile                                              7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtCreateProcess                                           7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtCreateProcessEx                                         7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtDeleteFile                                              7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtFreeVirtualMemory                                       7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtLoadDriver                                              7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtOpenFile                                                7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtProtectVirtualMemory                                    7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtSetInformationProcess                                   7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtUnloadDriver                                            7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!NtWriteVirtualMemory                                      7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!RtlAllocateHeap                                           7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!LdrLoadDll                                                7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!LdrUnloadDll                                              7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ntdll.dll!LdrGetProcedureAddress                                    7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CreateFileA                                            7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!VirtualProtect                                         7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!LoadLibraryExW                                         7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!LoadLibraryExA                                         7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!LoadLibraryA                                           7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CreateProcessW                                         7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CreateProcessA                                         7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!GetProcAddress                                         7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!LoadLibraryW                                           7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!GetModuleHandleA                                       7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!GetModuleHandleW                                       7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CreateFileW                                            7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!MoveFileWithProgressW                                  7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!MoveFileW                                              7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!OpenFile                                               7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!OpenFile + 3                                           7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CopyFileExW                                            7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CopyFileA                                              7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CopyFileW                                              7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!DeleteFileA                                            7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!DeleteFileW                                            7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!MoveFileExW                                            7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!MoveFileA                                              7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!MoveFileWithProgressA                                  7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!MoveFileExA                                            7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!CopyFileExA                                            7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!WinExec                                                7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] kernel32.dll!LoadModule                                             7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ADVAPI32.dll!OpenServiceW                                           77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ADVAPI32.dll!OpenServiceA                                           77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ADVAPI32.dll!CreateServiceA                                         77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ADVAPI32.dll!CreateServiceW                                         77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] USER32.dll!EndTask                                                  7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] WS2_32.dll!WSASocketW                                               71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] WS2_32.dll!WSASocketA                                               71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ole32.dll!CoCreateInstanceEx                                        77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] ole32.dll!CoGetClassObject                                          775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] SHELL32.dll!ShellExecuteExW                                         7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] SHELL32.dll!ShellExecuteEx                                          7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] SHELL32.dll!ShellExecuteA                                           7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[1908] SHELL32.dll!ShellExecuteW                                           7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtAllocateVirtualMemory                            7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtClose                                            7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtCreateFile                                       7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtCreateProcess                                    7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtCreateProcessEx                                  7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtDeleteFile                                       7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtFreeVirtualMemory                                7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtLoadDriver                                       7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtOpenFile                                         7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtProtectVirtualMemory                             7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtSetInformationProcess                            7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtUnloadDriver                                     7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!NtWriteVirtualMemory                               7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!RtlAllocateHeap                                    7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!LdrLoadDll                                         7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!LdrUnloadDll                                       7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ntdll.dll!LdrGetProcedureAddress                             7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CreateFileA                                     7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!VirtualProtect                                  7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!LoadLibraryExW                                  7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!LoadLibraryExA                                  7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!LoadLibraryA                                    7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CreateProcessW                                  7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CreateProcessA                                  7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!GetProcAddress                                  7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!LoadLibraryW                                    7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!GetModuleHandleA                                7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!GetModuleHandleW                                7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CreateFileW                                     7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!MoveFileWithProgressW                           7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!MoveFileW                                       7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!OpenFile                                        7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!OpenFile + 3                                    7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CopyFileExW                                     7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CopyFileA                                       7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CopyFileW                                       7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!DeleteFileA                                     7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!DeleteFileW                                     7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!MoveFileExW                                     7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!MoveFileA                                       7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!MoveFileWithProgressA                           7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!MoveFileExA                                     7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!CopyFileExA                                     7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!WinExec                                         7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] kernel32.dll!LoadModule                                      7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ADVAPI32.DLL!OpenServiceW                                    77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ADVAPI32.DLL!OpenServiceA                                    77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ADVAPI32.DLL!CreateServiceA                                  77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] ADVAPI32.DLL!CreateServiceW                                  77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] USER32.dll!EndTask                                           7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] SHELL32.DLL!ShellExecuteExW                                  7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] SHELL32.DLL!ShellExecuteEx                                   7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] SHELL32.DLL!ShellExecuteA                                    7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] SHELL32.DLL!ShellExecuteW                                    7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] OLE32.DLL!CoCreateInstanceEx                                 77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ASUS\AI Suite\AiNap\AiNap.exe[1944] OLE32.DLL!CoGetClassObject                                   775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtAllocateVirtualMemory                                              7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtClose                                                              7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtCreateFile                                                         7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtCreateProcess                                                      7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtCreateProcessEx                                                    7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtDeleteFile                                                         7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtFreeVirtualMemory                                                  7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtLoadDriver                                                         7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtOpenFile                                                           7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtProtectVirtualMemory                                               7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtSetInformationProcess                                              7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtUnloadDriver                                                       7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!NtWriteVirtualMemory                                                 7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!RtlAllocateHeap                                                      7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!LdrLoadDll                                                           7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!LdrUnloadDll                                                         7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ntdll.dll!LdrGetProcedureAddress                                               7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CreateFileA                                                       7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!VirtualProtect                                                    7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!LoadLibraryExW                                                    7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!LoadLibraryExA                                                    7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!LoadLibraryA                                                      7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CreateProcessW                                                    7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CreateProcessA                                                    7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!GetProcAddress                                                    7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!LoadLibraryW                                                      7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!GetModuleHandleA                                                  7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!GetModuleHandleW                                                  7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CreateFileW                                                       7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!MoveFileWithProgressW                                             7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!MoveFileW                                                         7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!OpenFile                                                          7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!OpenFile + 3                                                      7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CopyFileExW                                                       7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CopyFileA                                                         7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CopyFileW                                                         7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!DeleteFileA                                                       7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!DeleteFileW                                                       7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!MoveFileExW                                                       7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!MoveFileA                                                         7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!MoveFileWithProgressA                                             7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!MoveFileExA                                                       7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!CopyFileExA                                                       7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!WinExec                                                           7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] kernel32.dll!LoadModule                                                        7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ADVAPI32.dll!OpenServiceW                                                      77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ADVAPI32.dll!OpenServiceA                                                      77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ADVAPI32.dll!CreateServiceA                                                    77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] ADVAPI32.dll!CreateServiceW                                                    77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] USER32.dll!EndTask                                                             7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] SHELL32.dll!ShellExecuteExW                                                    7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] SHELL32.dll!ShellExecuteEx                                                     7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] SHELL32.dll!ShellExecuteA                                                      7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\WF2K.EXE[2000] SHELL32.dll!ShellExecuteW                                                      7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtAllocateVirtualMemory                                          7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtClose                                                          7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtCreateFile                                                     7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtCreateProcess                                                  7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtCreateProcessEx                                                7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtDeleteFile                                                     7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtFreeVirtualMemory                                              7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtLoadDriver                                                     7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtOpenFile                                                       7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtProtectVirtualMemory                                           7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtSetInformationProcess                                          7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtUnloadDriver                                                   7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!NtWriteVirtualMemory                                             7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!RtlAllocateHeap                                                  7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!LdrLoadDll                                                       7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!LdrUnloadDll                                                     7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ntdll.dll!LdrGetProcedureAddress                                           7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CreateFileA                                                   7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!VirtualProtect                                                7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!LoadLibraryExW                                                7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!LoadLibraryExA                                                7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!LoadLibraryA                                                  7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CreateProcessW                                                7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CreateProcessA                                                7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!GetProcAddress                                                7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!LoadLibraryW                                                  7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!GetModuleHandleA                                              7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!GetModuleHandleW                                              7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CreateFileW                                                   7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!MoveFileWithProgressW                                         7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!MoveFileW                                                     7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!OpenFile                                                      7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!OpenFile + 3                                                  7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CopyFileExW                                                   7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CopyFileA                                                     7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CopyFileW                                                     7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!DeleteFileA                                                   7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!DeleteFileW                                                   7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!MoveFileExW                                                   7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!MoveFileA                                                     7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!MoveFileWithProgressA                                         7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!MoveFileExA                                                   7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!CopyFileExA                                                   7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!WinExec                                                       7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] kernel32.dll!LoadModule                                                    7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] USER32.dll!EndTask                                                         7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ADVAPI32.dll!OpenServiceW                                                  77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ADVAPI32.dll!OpenServiceA                                                  77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ADVAPI32.dll!CreateServiceA                                                77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ADVAPI32.dll!CreateServiceW                                                77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ole32.dll!CoCreateInstanceEx                                               77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] ole32.dll!CoGetClassObject                                                 775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] SHELL32.dll!ShellExecuteExW                                                7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] SHELL32.dll!ShellExecuteEx                                                 7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] SHELL32.dll!ShellExecuteA                                                  7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\RUNDLL32.EXE[2012] SHELL32.dll!ShellExecuteW                                                  7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtAllocateVirtualMemory                                            7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtClose                                                            7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtCreateFile                                                       7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtCreateProcess                                                    7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtCreateProcessEx                                                  7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtDeleteFile                                                       7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtFreeVirtualMemory                                                7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtLoadDriver                                                       7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtOpenFile                                                         7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtProtectVirtualMemory                                             7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtSetInformationProcess                                            7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtUnloadDriver                                                     7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!NtWriteVirtualMemory                                               7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!RtlAllocateHeap                                                    7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!LdrLoadDll                                                         7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!LdrUnloadDll                                                       7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ntdll.dll!LdrGetProcedureAddress                                             7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CreateFileA                                                     7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!VirtualProtect                                                  7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!LoadLibraryExW                                                  7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!LoadLibraryExA                                                  7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!LoadLibraryA                                                    7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CreateProcessW                                                  7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CreateProcessA                                                  7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!GetProcAddress                                                  7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!LoadLibraryW                                                    7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!GetModuleHandleA                                                7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!GetModuleHandleW                                                7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CreateFileW                                                     7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!MoveFileWithProgressW                                           7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!MoveFileW                                                       7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!OpenFile                                                        7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!OpenFile + 3                                                    7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CopyFileExW                                                     7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CopyFileA                                                       7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CopyFileW                                                       7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!DeleteFileA                                                     7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!DeleteFileW                                                     7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!MoveFileExW                                                     7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!MoveFileA                                                       7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!MoveFileWithProgressA                                           7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!MoveFileExA                                                     7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!CopyFileExA                                                     7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!WinExec                                                         7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] kernel32.dll!LoadModule                                                      7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ADVAPI32.dll!OpenServiceW                                                    77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ADVAPI32.dll!OpenServiceA                                                    77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ADVAPI32.dll!CreateServiceA                                                  77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ADVAPI32.dll!CreateServiceW                                                  77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] USER32.dll!EndTask                                                           7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ole32.dll!CoCreateInstanceEx                                                 77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] ole32.dll!CoGetClassObject                                                   775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] SHELL32.dll!ShellExecuteExW                                                  7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] SHELL32.dll!ShellExecuteEx                                                   7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] SHELL32.dll!ShellExecuteA                                                    7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\ctfmon.exe[2020] SHELL32.dll!ShellExecuteW                                                    7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtAllocateVirtualMemory                                  7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtClose                                                  7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtCreateFile                                             7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtCreateProcess                                          7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtCreateProcessEx                                        7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtDeleteFile                                             7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtFreeVirtualMemory                                      7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtLoadDriver                                             7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtOpenFile                                               7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtProtectVirtualMemory                                   7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtSetInformationProcess                                  7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtUnloadDriver                                           7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!NtWriteVirtualMemory                                     7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!RtlAllocateHeap                                          7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!LdrLoadDll                                               7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!LdrUnloadDll                                             7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ntdll.dll!LdrGetProcedureAddress                                   7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CreateFileA                                           7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!VirtualProtect                                        7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!LoadLibraryExW                                        7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!LoadLibraryExA                                        7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!LoadLibraryA                                          7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CreateProcessW                                        7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CreateProcessA                                        7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!GetProcAddress                                        7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!LoadLibraryW                                          7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!GetModuleHandleA                                      7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!GetModuleHandleW                                      7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CreateFileW                                           7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!MoveFileWithProgressW                                 7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!MoveFileW                                             7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!OpenFile                                              7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!OpenFile + 3                                          7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CopyFileExW                                           7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CopyFileA                                             7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CopyFileW                                             7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!DeleteFileA                                           7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!DeleteFileW                                           7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!MoveFileExW                                           7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!MoveFileA                                             7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!MoveFileWithProgressA                                 7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!MoveFileExA                                           7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!CopyFileExA                                           7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!WinExec                                               7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] kernel32.dll!LoadModule                                            7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ADVAPI32.dll!OpenServiceW                                          77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ADVAPI32.dll!OpenServiceA                                          77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ADVAPI32.dll!CreateServiceA                                        77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ADVAPI32.dll!CreateServiceW                                        77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] USER32.dll!EndTask                                                 7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] SHELL32.dll!ShellExecuteExW                                        7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] SHELL32.dll!ShellExecuteEx                                         7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] SHELL32.dll!ShellExecuteA                                          7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] SHELL32.dll!ShellExecuteW                                          7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ole32.dll!CoCreateInstanceEx                                       77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] ole32.dll!CoGetClassObject                                         775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] WS2_32.dll!WSASocketW                                              71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] WS2_32.dll!WSASocketA                                              71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] WININET.dll!InternetConnectA                                       3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\SFAgent.exe[2028] WININET.dll!InternetConnectW                                       3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtAllocateVirtualMemory               7C90CF6E 5 Bytes  JMP 00371950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtClose                               7C90CFEE 5 Bytes  JMP 00378B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtCreateFile                          7C90D0AE 5 Bytes  JMP 003718D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtCreateProcess                       7C90D14E 5 Bytes  JMP 00371890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtCreateProcessEx                     7C90D15E 5 Bytes  JMP 003719B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtDeleteFile                          7C90D23E 5 Bytes  JMP 00371910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtFreeVirtualMemory                   7C90D38E 5 Bytes  JMP 00371A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtLoadDriver                          7C90D46E 5 Bytes  JMP 00371970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtOpenFile                            7C90D59E 5 Bytes  JMP 003718F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtProtectVirtualMemory                7C90D6EE 5 Bytes  JMP 00371930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtSetInformationProcess               7C90DC9E 5 Bytes  JMP 003719D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtUnloadDriver                        7C90DEBE 5 Bytes  JMP 00371990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!NtWriteVirtualMemory                  7C90DFAE 5 Bytes  JMP 003718B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!RtlAllocateHeap                       7C9100C4 5 Bytes  JMP 00371A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!LdrLoadDll                            7C9163C3 5 Bytes  JMP 00374550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!LdrUnloadDll                          7C91738B 5 Bytes  JMP 00378A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ntdll.dll!LdrGetProcedureAddress                7C917EA8 5 Bytes  JMP 003719F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CreateFileA                        7C801A28 5 Bytes  JMP 00371B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!VirtualProtect                     7C801AD4 5 Bytes  JMP 00371D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!LoadLibraryExW                     7C801AF5 7 Bytes  JMP 00371AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!LoadLibraryExA                     7C801D53 5 Bytes  JMP 00371AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!LoadLibraryA                       7C801D7B 5 Bytes  JMP 00371D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CreateProcessW                     7C802336 5 Bytes  JMP 00371A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CreateProcessA                     7C80236B 5 Bytes  JMP 00371A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!GetProcAddress                     7C80AE40 5 Bytes  JMP 00371A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!LoadLibraryW                       7C80AEEB 5 Bytes  JMP 00371D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!GetModuleHandleA                   7C80B741 5 Bytes  JMP 00371CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!GetModuleHandleW                   7C80E4DD 5 Bytes  JMP 00371D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CreateFileW                        7C810800 5 Bytes  JMP 00371B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!MoveFileWithProgressW              7C81F72E 5 Bytes  JMP 00371C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!MoveFileW                          7C821261 5 Bytes  JMP 00371C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!OpenFile                           7C821982 2 Bytes  JMP 00371B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!OpenFile + 3                       7C821985 2 Bytes  [B5, 83] {MOV CH, 0x83}
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CopyFileExW                        7C827B32 7 Bytes  JMP 00371BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CopyFileA                          7C8286EE 5 Bytes  JMP 00371B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CopyFileW                          7C82F87B 5 Bytes  JMP 00371B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!DeleteFileA                        7C831EDD 5 Bytes  JMP 00371CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!DeleteFileW                        7C831F63 5 Bytes  JMP 00371CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!MoveFileExW                        7C83568B 5 Bytes  JMP 00371C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!MoveFileA                          7C835EBF 5 Bytes  JMP 00371BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!MoveFileWithProgressA              7C835EDE 5 Bytes  JMP 00371C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!MoveFileExA                        7C85E49B 5 Bytes  JMP 00371C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!CopyFileExA                        7C85F39C 5 Bytes  JMP 00371BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!WinExec                            7C86250D 5 Bytes  JMP 00371D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] kernel32.dll!LoadModule                         7C86261E 5 Bytes  JMP 00371AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ADVAPI32.dll!OpenServiceW                       77DE6FFD 7 Bytes  JMP 00371480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ADVAPI32.dll!OpenServiceA                       77DF4C66 7 Bytes  JMP 00371640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ADVAPI32.dll!CreateServiceA                     77E37211 7 Bytes  JMP 00371000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ADVAPI32.dll!CreateServiceW                     77E373A9 7 Bytes  JMP 00371250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] USER32.dll!EndTask                              7E45A0A5 5 Bytes  JMP 00378700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ole32.dll!CoCreateInstanceEx                    77500526 5 Bytes  JMP 00378450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] ole32.dll!CoGetClassObject                      775156C5 5 Bytes  JMP 00378590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] WS2_32.dll!WSASocketW                           71AB404E 7 Bytes  JMP 00371E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] WS2_32.dll!WSASocketA                           71AB8B6A 3 Bytes  JMP 00371E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe[2100] WS2_32.dll!WSASocketA + 4                       71AB8B6E 1 Byte  [8E]
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtAllocateVirtualMemory                             7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtClose                                             7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtCreateFile                                        7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtCreateProcess                                     7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtCreateProcessEx                                   7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtDeleteFile                                        7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtFreeVirtualMemory                                 7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtLoadDriver                                        7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtOpenFile                                          7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtProtectVirtualMemory                              7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtSetInformationProcess                             7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtUnloadDriver                                      7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!NtWriteVirtualMemory                                7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!RtlAllocateHeap                                     7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!LdrLoadDll                                          7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!LdrUnloadDll                                        7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ntdll.dll!LdrGetProcedureAddress                              7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CreateFileA                                      7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!VirtualProtect                                   7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!LoadLibraryExW                                   7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!LoadLibraryExA                                   7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!LoadLibraryA                                     7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CreateProcessW                                   7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CreateProcessA                                   7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!GetProcAddress                                   7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!LoadLibraryW                                     7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!GetModuleHandleA                                 7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!GetModuleHandleW                                 7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CreateFileW                                      7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!MoveFileWithProgressW                            7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!MoveFileW                                        7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!OpenFile                                         7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!OpenFile + 3                                     7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CopyFileExW                                      7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CopyFileA                                        7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CopyFileW                                        7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!DeleteFileA                                      7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!DeleteFileW                                      7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!MoveFileExW                                      7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!MoveFileA                                        7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!MoveFileWithProgressA                            7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!MoveFileExA                                      7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!CopyFileExA                                      7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!WinExec                                          7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] kernel32.dll!LoadModule                                       7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] USER32.dll!EndTask                                            7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ADVAPI32.dll!OpenServiceW                                     77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ADVAPI32.dll!OpenServiceA                                     77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ADVAPI32.dll!CreateServiceA                                   77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe[2144] ADVAPI32.dll!CreateServiceW                                   77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtAllocateVirtualMemory                                    7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtClose                                                    7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtCreateFile                                               7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtCreateProcess                                            7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtCreateProcessEx                                          7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtDeleteFile                                               7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtFreeVirtualMemory                                        7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtLoadDriver                                               7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtOpenFile                                                 7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtProtectVirtualMemory                                     7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtSetInformationProcess                                    7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtUnloadDriver                                             7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!NtWriteVirtualMemory                                       7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!RtlAllocateHeap                                            7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!LdrLoadDll                                                 7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!LdrUnloadDll                                               7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ntdll.dll!LdrGetProcedureAddress                                     7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CreateFileA                                             7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!VirtualProtect                                          7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!LoadLibraryExW                                          7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!LoadLibraryExA                                          7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!LoadLibraryA                                            7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CreateProcessW                                          7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CreateProcessA                                          7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!GetProcAddress                                          7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!LoadLibraryW                                            7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!GetModuleHandleA                                        7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!GetModuleHandleW                                        7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CreateFileW                                             7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!MoveFileWithProgressW                                   7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!MoveFileW                                               7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!OpenFile                                                7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!OpenFile + 3                                            7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CopyFileExW                                             7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CopyFileA                                               7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CopyFileW                                               7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!DeleteFileA                                             7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!DeleteFileW                                             7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!MoveFileExW                                             7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!MoveFileA                                               7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!MoveFileWithProgressA                                   7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!MoveFileExA                                             7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!CopyFileExA                                             7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!WinExec                                                 7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] kernel32.dll!LoadModule                                              7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] WS2_32.dll!WSASocketW                                                71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] WS2_32.dll!WSASocketA                                                71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ADVAPI32.dll!OpenServiceW                                            77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ADVAPI32.dll!OpenServiceA                                            77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ADVAPI32.dll!CreateServiceA                                          77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ADVAPI32.dll!CreateServiceW                                          77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ole32.dll!CoCreateInstanceEx                                         77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] ole32.dll!CoGetClassObject                                           775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Java\jre6\bin\jqs.exe[2164] USER32.dll!EndTask                                                   7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtAllocateVirtualMemory                      7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtClose                                      7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtCreateFile                                 7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtCreateProcess                              7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtCreateProcessEx                            7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtDeleteFile                                 7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtFreeVirtualMemory                          7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtLoadDriver                                 7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtOpenFile                                   7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtProtectVirtualMemory                       7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtSetInformationProcess                      7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtUnloadDriver                               7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!NtWriteVirtualMemory                         7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!RtlAllocateHeap                              7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!LdrLoadDll                                   7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!LdrUnloadDll                                 7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ntdll.dll!LdrGetProcedureAddress                       7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CreateFileA                               7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!VirtualProtect                            7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!LoadLibraryExW                            7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!LoadLibraryExA                            7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!LoadLibraryA                              7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CreateProcessW                            7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CreateProcessA                            7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!GetProcAddress                            7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!LoadLibraryW                              7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!GetModuleHandleA                          7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!GetModuleHandleW                          7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CreateFileW                               7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!MoveFileWithProgressW                     7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!MoveFileW                                 7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!OpenFile                                  7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!OpenFile + 3                              7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CopyFileExW                               7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CopyFileA                                 7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CopyFileW                                 7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!DeleteFileA                               7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!DeleteFileW                               7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!MoveFileExW                               7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!MoveFileA                                 7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!MoveFileWithProgressA                     7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!MoveFileExA                               7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!CopyFileExA                               7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!WinExec                                   7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] kernel32.dll!LoadModule                                7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ADVAPI32.dll!OpenServiceW                              77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ADVAPI32.dll!OpenServiceA                              77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ADVAPI32.dll!CreateServiceA                            77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] ADVAPI32.dll!CreateServiceW                            77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] USER32.dll!EndTask                                     7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] SHELL32.dll!ShellExecuteExW                            7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] SHELL32.dll!ShellExecuteEx                             7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] SHELL32.dll!ShellExecuteA                              7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\LightScribe\LSSrvc.exe[2288] SHELL32.dll!ShellExecuteW                              7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtAllocateVirtualMemory                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtClose                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtCreateFile                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtCreateProcess                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtCreateProcessEx                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtDeleteFile                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtFreeVirtualMemory                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtLoadDriver                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtOpenFile                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtProtectVirtualMemory                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtSetInformationProcess                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtUnloadDriver                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!NtWriteVirtualMemory                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!RtlAllocateHeap                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!LdrLoadDll                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!LdrUnloadDll                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ntdll.dll!LdrGetProcedureAddress                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CreateFileA                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!VirtualProtect                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!LoadLibraryExW                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!LoadLibraryExA                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!LoadLibraryA                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CreateProcessW                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CreateProcessA                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!GetProcAddress                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!LoadLibraryW                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!GetModuleHandleA                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!GetModuleHandleW                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CreateFileW                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!MoveFileWithProgressW                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!MoveFileW                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!OpenFile                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!OpenFile + 3                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CopyFileExW                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CopyFileA                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CopyFileW                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!DeleteFileA                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!DeleteFileW                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!MoveFileExW                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!MoveFileA                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!MoveFileWithProgressA                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!MoveFileExA                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!CopyFileExA                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!WinExec                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] kernel32.dll!LoadModule                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] USER32.dll!EndTask                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ADVAPI32.dll!OpenServiceW                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ADVAPI32.dll!OpenServiceA                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ADVAPI32.dll!CreateServiceA                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ADVAPI32.dll!CreateServiceW                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] SHELL32.dll!ShellExecuteExW                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] SHELL32.dll!ShellExecuteEx                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] SHELL32.dll!ShellExecuteA                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] SHELL32.dll!ShellExecuteW                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ole32.dll!CoCreateInstanceEx                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft LifeCam\MSCamS32.exe[2332] ole32.dll!CoGetClassObject                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\nvsvc32.exe[2372] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtAllocateVirtualMemory                                               7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtClose                                                               7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtCreateFile                                                          7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtCreateProcess                                                       7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtCreateProcessEx                                                     7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtDeleteFile                                                          7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtFreeVirtualMemory                                                   7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtLoadDriver                                                          7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtOpenFile                                                            7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtProtectVirtualMemory                                                7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtSetInformationProcess                                               7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtUnloadDriver                                                        7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!NtWriteVirtualMemory                                                  7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!RtlAllocateHeap                                                       7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!LdrLoadDll                                                            7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!LdrUnloadDll                                                          7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ntdll.dll!LdrGetProcedureAddress                                                7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CreateFileA                                                        7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!VirtualProtect                                                     7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!LoadLibraryExW                                                     7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!LoadLibraryExA                                                     7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!LoadLibraryA                                                       7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CreateProcessW                                                     7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CreateProcessA                                                     7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!GetProcAddress                                                     7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!LoadLibraryW                                                       7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!GetModuleHandleA                                                   7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!GetModuleHandleW                                                   7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CreateFileW                                                        7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!MoveFileWithProgressW                                              7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!MoveFileW                                                          7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!OpenFile                                                           7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!OpenFile + 3                                                       7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CopyFileExW                                                        7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CopyFileA                                                          7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CopyFileW                                                          7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!DeleteFileA                                                        7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!DeleteFileW                                                        7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!MoveFileExW                                                        7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!MoveFileA                                                          7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!MoveFileWithProgressA                                              7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!MoveFileExA                                                        7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!CopyFileExA                                                        7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!WinExec                                                            7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] kernel32.dll!LoadModule                                                         7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] USER32.dll!EndTask                                                              7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ADVAPI32.dll!OpenServiceW                                                       77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ADVAPI32.dll!OpenServiceA                                                       77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ADVAPI32.dll!CreateServiceA                                                     77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ADVAPI32.dll!CreateServiceW                                                     77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ole32.dll!CoCreateInstanceEx                                                    77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] ole32.dll!CoGetClassObject                                                      775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] WS2_32.dll!WSASocketW                                                           71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] WS2_32.dll!WSASocketA                                                           71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] SHELL32.dll!ShellExecuteExW                                                     7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] SHELL32.dll!ShellExecuteEx                                                      7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] SHELL32.dll!ShellExecuteA                                                       7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\alg.exe[2416] SHELL32.dll!ShellExecuteW                                                       7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtAllocateVirtualMemory                                     7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtClose                                                     7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtCreateFile                                                7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtCreateProcess                                             7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtCreateProcessEx                                           7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtDeleteFile                                                7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtFreeVirtualMemory                                         7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtLoadDriver                                                7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtOpenFile                                                  7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtProtectVirtualMemory                                      7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtSetInformationProcess                                     7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtUnloadDriver                                              7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!NtWriteVirtualMemory                                        7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!RtlAllocateHeap                                             7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!LdrLoadDll                                                  7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!LdrUnloadDll                                                7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ntdll.dll!LdrGetProcedureAddress                                      7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CreateFileA                                              7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!VirtualProtect                                           7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!LoadLibraryExW                                           7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!LoadLibraryExA                                           7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!LoadLibraryA                                             7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CreateProcessW                                           7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CreateProcessA                                           7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!GetProcAddress                                           7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!LoadLibraryW                                             7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!GetModuleHandleA                                         7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!GetModuleHandleW                                         7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CreateFileW                                              7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!MoveFileWithProgressW                                    7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!MoveFileW                                                7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!OpenFile                                                 7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!OpenFile + 3                                             7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CopyFileExW                                              7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CopyFileA                                                7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CopyFileW                                                7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!DeleteFileA                                              7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!DeleteFileW                                              7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!MoveFileExW                                              7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!MoveFileA                                                7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!MoveFileWithProgressA                                    7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!MoveFileExA                                              7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!CopyFileExA                                              7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!WinExec                                                  7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] kernel32.dll!LoadModule                                               7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ADVAPI32.dll!OpenServiceW                                             77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ADVAPI32.dll!OpenServiceA                                             77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ADVAPI32.dll!CreateServiceA                                           77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ADVAPI32.dll!CreateServiceW                                           77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] WS2_32.dll!WSASocketW                                                 71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] WS2_32.dll!WSASocketA                                                 71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] WININET.dll!InternetConnectA                                          3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] WININET.dll!InternetConnectW                                          3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] USER32.dll!EndTask                                                    7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ole32.dll!CoCreateInstanceEx                                          77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] ole32.dll!CoGetClassObject                                            775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] SHELL32.dll!ShellExecuteExW                                           7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] SHELL32.dll!ShellExecuteEx                                            7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] SHELL32.dll!ShellExecuteA                                             7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\SPAMfighter\sfus.exe[2464] SHELL32.dll!ShellExecuteW                                             7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\system32\svchost.exe[2724] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtAllocateVirtualMemory                   7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtClose                                   7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtCreateFile                              7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtCreateProcess                           7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtCreateProcessEx                         7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtDeleteFile                              7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtFreeVirtualMemory                       7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtLoadDriver                              7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtOpenFile                                7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtProtectVirtualMemory                    7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtSetInformationProcess                   7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtUnloadDriver                            7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!NtWriteVirtualMemory                      7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!RtlAllocateHeap                           7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!LdrLoadDll                                7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!LdrUnloadDll                              7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ntdll.dll!LdrGetProcedureAddress                    7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CreateFileA                            7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!VirtualProtect                         7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!LoadLibraryExW                         7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!LoadLibraryExA                         7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!LoadLibraryA                           7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CreateProcessW                         7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CreateProcessA                         7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!GetProcAddress                         7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!LoadLibraryW                           7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!GetModuleHandleA                       7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!GetModuleHandleW                       7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CreateFileW                            7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!MoveFileWithProgressW                  7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!MoveFileW                              7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!OpenFile                               7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!OpenFile + 3                           7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CopyFileExW                            7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CopyFileA                              7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CopyFileW                              7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!DeleteFileA                            7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!DeleteFileW                            7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!MoveFileExW                            7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!MoveFileA                              7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!MoveFileWithProgressA                  7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!MoveFileExA                            7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!CopyFileExA                            7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!WinExec                                7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] kernel32.dll!LoadModule                             7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] USER32.dll!EndTask                                  7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ADVAPI32.dll!OpenServiceW                           77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ADVAPI32.dll!OpenServiceA                           77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ADVAPI32.dll!CreateServiceA                         77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ADVAPI32.dll!CreateServiceW                         77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] SHELL32.dll!ShellExecuteExW                         7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] SHELL32.dll!ShellExecuteEx                          7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] SHELL32.dll!ShellExecuteA                           7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] SHELL32.dll!ShellExecuteW                           7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ole32.dll!CoCreateInstanceEx                        77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] ole32.dll!CoGetClassObject                          775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] WININET.dll!InternetConnectA                        3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] WININET.dll!InternetConnectW                        3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] WS2_32.dll!WSASocketW                               71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Webroot\WebrootSecurity\SpySweeper.exe[2780] WS2_32.dll!WSASocketA                               71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtAllocateVirtualMemory                                    7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtClose                                                    7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtCreateFile                                               7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtCreateProcess                                            7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtCreateProcessEx                                          7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtDeleteFile                                               7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtFreeVirtualMemory                                        7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtLoadDriver                                               7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtOpenFile                                                 7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtProtectVirtualMemory                                     7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtSetInformationProcess                                    7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtUnloadDriver                                             7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!NtWriteVirtualMemory                                       7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!KiUserExceptionDispatcher                                  7C90E47C 7 Bytes  JMP 100022D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!RtlAllocateHeap                                            7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!LdrLoadDll                                                 7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!LdrUnloadDll                                               7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ntdll.dll!LdrGetProcedureAddress                                     7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CreateFileA                                             7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!VirtualProtect                                          7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!LoadLibraryExW                                          7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!LoadLibraryExA                                          7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!LoadLibraryA                                            7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CreateProcessW                                          7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CreateProcessA                                          7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!GetProcAddress                                          7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!LoadLibraryW                                            7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!GetModuleHandleA                                        7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!GetModuleHandleW                                        7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CreateFileW                                             7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!MoveFileWithProgressW                                   7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!MoveFileW                                               7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!OpenFile                                                7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!OpenFile + 3                                            7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CopyFileExW                                             7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CopyFileA                                               7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CopyFileW                                               7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!DeleteFileA                                             7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!DeleteFileW                                             7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!MoveFileExW                                             7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!MoveFileA                                               7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!MoveFileWithProgressA                                   7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!MoveFileExA                                             7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!CopyFileExA                                             7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!WinExec                                                 7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] kernel32.dll!LoadModule                                              7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ADVAPI32.dll!OpenServiceW                                            77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ADVAPI32.dll!OpenServiceA                                            77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ADVAPI32.dll!CreateServiceA                                          77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ADVAPI32.dll!CreateServiceW                                          77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] USER32.dll!EndTask                                                   7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ole32.dll!CoCreateInstanceEx                                         77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] ole32.dll!CoGetClassObject                                           775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] wininet.dll!InternetConnectA                                         3D94DF8E 5 Bytes  JMP 10001E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] wininet.dll!InternetConnectW                                         3D94F942 5 Bytes  JMP 10001E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] shell32.dll!ShellExecuteExW                                          7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] shell32.dll!ShellExecuteEx                                           7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] shell32.dll!ShellExecuteA                                            7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] shell32.dll!ShellExecuteW                                            7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] WS2_32.dll!WSASocketW                                                71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Skype\Phone\Skype.exe[2952] WS2_32.dll!WSASocketA                                                71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtAllocateVirtualMemory                                           7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtClose                                                           7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtCreateFile                                                      7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtCreateProcess                                                   7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtCreateProcessEx                                                 7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtDeleteFile                                                      7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtFreeVirtualMemory                                               7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtLoadDriver                                                      7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtOpenFile                                                        7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtProtectVirtualMemory                                            7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtSetInformationProcess                                           7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtUnloadDriver                                                    7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!NtWriteVirtualMemory                                              7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!RtlAllocateHeap                                                   7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!LdrLoadDll                                                        7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!LdrUnloadDll                                                      7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ntdll.dll!LdrGetProcedureAddress                                            7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CreateFileA                                                    7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!VirtualProtect                                                 7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!LoadLibraryExW                                                 7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!LoadLibraryExA                                                 7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!LoadLibraryA                                                   7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CreateProcessW                                                 7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CreateProcessA                                                 7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!GetProcAddress                                                 7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!LoadLibraryW                                                   7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!GetModuleHandleA                                               7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!GetModuleHandleW                                               7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CreateFileW                                                    7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!MoveFileWithProgressW                                          7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!MoveFileW                                                      7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!OpenFile                                                       7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!OpenFile + 3                                                   7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CopyFileExW                                                    7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CopyFileA                                                      7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CopyFileW                                                      7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!DeleteFileA                                                    7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!DeleteFileW                                                    7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!MoveFileExW                                                    7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!MoveFileA                                                      7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!MoveFileWithProgressA                                          7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!MoveFileExA                                                    7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!CopyFileExA                                                    7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!WinExec                                                        7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] kernel32.dll!LoadModule                                                     7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ADVAPI32.dll!OpenServiceW                                                   77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ADVAPI32.dll!OpenServiceA                                                   77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ADVAPI32.dll!CreateServiceA                                                 77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ADVAPI32.dll!CreateServiceW                                                 77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] USER32.dll!EndTask                                                          7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ole32.dll!CoCreateInstanceEx                                                77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] ole32.dll!CoGetClassObject                                                  775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] SHELL32.dll!ShellExecuteExW                                                 7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] SHELL32.dll!ShellExecuteEx                                                  7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] SHELL32.dll!ShellExecuteA                                                   7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\WINDOWS\System32\svchost.exe[3136] SHELL32.dll!ShellExecuteW                                                   7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtAllocateVirtualMemory                                    7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtClose                                                    7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtCreateFile                                               7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtCreateProcess                                            7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtCreateProcessEx                                          7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtDeleteFile                                               7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtFreeVirtualMemory                                        7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtLoadDriver                                               7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtOpenFile                                                 7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtProtectVirtualMemory                                     7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtSetInformationProcess                                    7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtUnloadDriver                                             7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!NtWriteVirtualMemory                                       7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!RtlAllocateHeap                                            7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!LdrLoadDll                                                 7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!LdrUnloadDll                                               7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ntdll.dll!LdrGetProcedureAddress                                     7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CreateFileA                                             7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!VirtualProtect                                          7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!LoadLibraryExW                                          7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!LoadLibraryExA                                          7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!LoadLibraryA                                            7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CreateProcessW                                          7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CreateProcessA                                          7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!GetProcAddress                                          7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!LoadLibraryW                                            7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!GetModuleHandleA                                        7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!GetModuleHandleW                                        7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CreateFileW                                             7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!MoveFileWithProgressW                                   7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!MoveFileW                                               7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!OpenFile                                                7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!OpenFile + 3                                            7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CopyFileExW                                             7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CopyFileA                                               7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CopyFileW                                               7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!DeleteFileA                                             7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!DeleteFileW                                             7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!MoveFileExW                                             7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!MoveFileA                                               7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!MoveFileWithProgressA                                   7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!MoveFileExA                                             7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!CopyFileExA                                             7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!WinExec                                                 7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] kernel32.dll!LoadModule                                              7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ADVAPI32.dll!OpenServiceW                                            77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ADVAPI32.dll!OpenServiceA                                            77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ADVAPI32.dll!CreateServiceA                                          77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ADVAPI32.dll!CreateServiceW                                          77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] USER32.dll!EndTask                                                   7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ole32.dll!CoCreateInstanceEx                                         77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Canon\CAL\CALMAIN.exe[3264] ole32.dll!CoGetClassObject                                           775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtAllocateVirtualMemory                   7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtClose                                   7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtCreateFile                              7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtCreateProcess                           7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtCreateProcessEx                         7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtDeleteFile                              7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtFreeVirtualMemory                       7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtLoadDriver                              7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtOpenFile                                7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtProtectVirtualMemory                    7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtSetInformationProcess                   7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtUnloadDriver                            7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!NtWriteVirtualMemory                      7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!RtlAllocateHeap                           7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!LdrLoadDll                                7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!LdrUnloadDll                              7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ntdll.dll!LdrGetProcedureAddress                    7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CreateFileA                            7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!VirtualProtect                         7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!LoadLibraryExW                         7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!LoadLibraryExA                         7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!LoadLibraryA                           7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CreateProcessW                         7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CreateProcessA                         7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!GetProcAddress                         7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!LoadLibraryW                           7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!GetModuleHandleA                       7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!GetModuleHandleW                       7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CreateFileW                            7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!MoveFileWithProgressW                  7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!MoveFileW                              7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!OpenFile                               7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!OpenFile + 3                           7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CopyFileExW                            7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CopyFileA                              7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CopyFileW                              7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!DeleteFileA                            7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!DeleteFileW                            7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!MoveFileExW                            7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!MoveFileA                              7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!MoveFileWithProgressA                  7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!MoveFileExA                            7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!CopyFileExA                            7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!WinExec                                7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] kernel32.dll!LoadModule                             7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ADVAPI32.dll!OpenServiceW                           77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ADVAPI32.dll!OpenServiceA                           77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ADVAPI32.dll!CreateServiceA                         77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ADVAPI32.dll!CreateServiceW                         77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] USER32.dll!EndTask                                  7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ole32.dll!CoCreateInstanceEx                        77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] ole32.dll!CoGetClassObject                          775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] shell32.dll!ShellExecuteExW                         7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] shell32.dll!ShellExecuteEx                          7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] shell32.dll!ShellExecuteA                           7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Documents and Settings\Linds\Desktop\patrick.exe.exe[3584] shell32.dll!ShellExecuteW                           7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtAllocateVirtualMemory                       7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtClose                                       7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtCreateFile                                  7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtCreateProcess                               7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtCreateProcessEx                             7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtDeleteFile                                  7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtFreeVirtualMemory                           7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtLoadDriver                                  7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtOpenFile                                    7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtProtectVirtualMemory                        7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtSetInformationProcess                       7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtUnloadDriver                                7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!NtWriteVirtualMemory                          7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!RtlAllocateHeap                               7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!LdrLoadDll                                    7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!LdrUnloadDll                                  7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ntdll.dll!LdrGetProcedureAddress                        7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CreateFileA                                7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!VirtualProtect                             7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!LoadLibraryExW                             7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!LoadLibraryExA                             7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!LoadLibraryA                               7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CreateProcessW                             7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CreateProcessA                             7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!GetProcAddress                             7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!LoadLibraryW                               7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!GetModuleHandleA                           7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!GetModuleHandleW                           7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CreateFileW                                7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!MoveFileWithProgressW                      7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!MoveFileW                                  7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!OpenFile                                   7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!OpenFile + 3                               7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CopyFileExW                                7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CopyFileA                                  7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CopyFileW                                  7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!DeleteFileA                                7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!DeleteFileW                                7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!MoveFileExW                                7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!MoveFileA                                  7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!MoveFileWithProgressA                      7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!MoveFileExA                                7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!CopyFileExA                                7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!WinExec                                    7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] kernel32.dll!LoadModule                                 7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] WS2_32.dll!WSASocketW                                   71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] WS2_32.dll!WSASocketA                                   71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ADVAPI32.dll!OpenServiceW                               77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ADVAPI32.dll!OpenServiceA                               77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ADVAPI32.dll!CreateServiceA                             77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ADVAPI32.dll!CreateServiceW                             77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] USER32.dll!EndTask                                      7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ole32.dll!CoCreateInstanceEx                            77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] ole32.dll!CoGetClassObject                              775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] SHELL32.dll!ShellExecuteExW                             7CA0996B 5 Bytes  JMP 10001E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] SHELL32.dll!ShellExecuteEx                              7CA40EB5 5 Bytes  JMP 10001DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] SHELL32.dll!ShellExecuteA                               7CA411E0 5 Bytes  JMP 10001DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[3924] SHELL32.dll!ShellExecuteW                               7CAB5D48 5 Bytes  JMP 10001DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtAllocateVirtualMemory                       7C90CF6E 5 Bytes  JMP 10001950 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtClose                                       7C90CFEE 5 Bytes  JMP 10008B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtCreateFile                                  7C90D0AE 5 Bytes  JMP 100018D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtCreateProcess                               7C90D14E 5 Bytes  JMP 10001890 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtCreateProcessEx                             7C90D15E 5 Bytes  JMP 100019B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtDeleteFile                                  7C90D23E 5 Bytes  JMP 10001910 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtFreeVirtualMemory                           7C90D38E 5 Bytes  JMP 10001A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtLoadDriver                                  7C90D46E 5 Bytes  JMP 10001970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtOpenFile                                    7C90D59E 5 Bytes  JMP 100018F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtProtectVirtualMemory                        7C90D6EE 5 Bytes  JMP 10001930 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtSetInformationProcess                       7C90DC9E 5 Bytes  JMP 100019D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtUnloadDriver                                7C90DEBE 5 Bytes  JMP 10001990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!NtWriteVirtualMemory                          7C90DFAE 5 Bytes  JMP 100018B0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!RtlAllocateHeap                               7C9100C4 5 Bytes  JMP 10001A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!LdrLoadDll                                    7C9163C3 5 Bytes  JMP 10004550 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!LdrUnloadDll                                  7C91738B 5 Bytes  JMP 10008A60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ntdll.dll!LdrGetProcedureAddress                        7C917EA8 5 Bytes  JMP 100019F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CreateFileA                                7C801A28 5 Bytes  JMP 10001B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!VirtualProtect                             7C801AD4 5 Bytes  JMP 10001D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!LoadLibraryExW                             7C801AF5 7 Bytes  JMP 10001AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!LoadLibraryExA                             7C801D53 5 Bytes  JMP 10001AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!LoadLibraryA                               7C801D7B 5 Bytes  JMP 10001D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CreateProcessW                             7C802336 5 Bytes  JMP 10001A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CreateProcessA                             7C80236B 5 Bytes  JMP 10001A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!GetProcAddress                             7C80AE40 5 Bytes  JMP 10001A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!LoadLibraryW                               7C80AEEB 5 Bytes  JMP 10001D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!GetModuleHandleA                           7C80B741 5 Bytes  JMP 10001CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!GetModuleHandleW                           7C80E4DD 5 Bytes  JMP 10001D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CreateFileW                                7C810800 5 Bytes  JMP 10001B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!MoveFileWithProgressW                      7C81F72E 5 Bytes  JMP 10001C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!MoveFileW                                  7C821261 5 Bytes  JMP 10001C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!OpenFile                                   7C821982 2 Bytes  JMP 10001B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!OpenFile + 3                               7C821985 2 Bytes  [7E, 93] {JLE 0xffffffffffffff95}
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CopyFileExW                                7C827B32 7 Bytes  JMP 10001BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CopyFileA                                  7C8286EE 5 Bytes  JMP 10001B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CopyFileW                                  7C82F87B 5 Bytes  JMP 10001B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!DeleteFileA                                7C831EDD 5 Bytes  JMP 10001CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!DeleteFileW                                7C831F63 5 Bytes  JMP 10001CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!MoveFileExW                                7C83568B 5 Bytes  JMP 10001C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!MoveFileA                                  7C835EBF 5 Bytes  JMP 10001BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!MoveFileWithProgressA                      7C835EDE 5 Bytes  JMP 10001C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!MoveFileExA                                7C85E49B 5 Bytes  JMP 10001C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!CopyFileExA                                7C85F39C 5 Bytes  JMP 10001BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!WinExec                                    7C86250D 5 Bytes  JMP 10001D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] kernel32.dll!LoadModule                                 7C86261E 5 Bytes  JMP 10001AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] WS2_32.dll!WSASocketW                                   71AB404E 7 Bytes  JMP 10001E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] WS2_32.dll!WSASocketA                                   71AB8B6A 5 Bytes  JMP 10001E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ADVAPI32.dll!OpenServiceW                               77DE6FFD 7 Bytes  JMP 10001480 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ADVAPI32.dll!OpenServiceA                               77DF4C66 7 Bytes  JMP 10001640 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ADVAPI32.dll!CreateServiceA                             77E37211 7 Bytes  JMP 10001000 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ADVAPI32.dll!CreateServiceW                             77E373A9 7 Bytes  JMP 10001250 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] USER32.dll!EndTask                                      7E45A0A5 5 Bytes  JMP 10008700 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ole32.dll!CoCreateInstanceEx                            77500526 5 Bytes  JMP 10008450 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[3984] ole32.dll!CoGetClassObject                              775156C5 5 Bytes  JMP 10008590 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisCloseAdapter]                                               [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisOpenAdapter]                                                [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisDeregisterProtocol]                                         [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisRegisterProtocol]                                           [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol]                                          [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisOpenAdapter]                                               [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisCloseAdapter]                                              [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol]                                        [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol]                                          [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol]                                            [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisOpenAdapter]                                                 [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisCloseAdapter]                                                [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol]                                           [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol]                                         [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisCloseAdapter]                                               [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisOpenAdapter]                                                [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter]                                                 [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter]                                                  [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol]                                             [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol]                                          [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol]                                            [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisOpenAdapter]                                                 [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisCloseAdapter]                                                [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisCloseAdapter]                                               [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisOpenAdapter]                                                [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisDeregisterProtocol]                                         [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\arp1394.sys[NDIS.SYS!NdisRegisterProtocol]                                           [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol]                                           [B9D95740] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol]                                         [B9D95780] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter]                                               [B9D956E0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)
IAT             \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter]                                                [B9D957B0] inspect.sys (COMODO Internet Security Firewall Driver/COMODO)

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\WINDOWS\system32\services.exe[724] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW]      005D0002
IAT             C:\WINDOWS\system32\services.exe[724] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW]            005D0000

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                            ssfs0bbc.sys (Spy Sweeper FileSystem Filter Driver/Webroot Software, Inc. (www.webroot.com))
AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                            InCDrec.SYS (InCD File System Recognizer/Nero AG)
AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                            aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device          \Driver\Tcpip \Device\Ip                                                                                          88F4B0A8
Device          \Driver\Tcpip \Device\Ip                                                                                          88EA1160
Device          \Driver\Tcpip \Device\Ip                                                                                          88D6F0D8

AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                          cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                          aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device          \Driver\Tcpip \Device\Tcp                                                                                         88F4B0A8
Device          \Driver\Tcpip \Device\Tcp                                                                                         88EA1160
Device          \Driver\Tcpip \Device\Tcp                                                                                         88D6F0D8

AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                         cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                         aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device          \Driver\Tcpip \Device\Udp                                                                                         88F4B0A8
Device          \Driver\Tcpip \Device\Udp                                                                                         88EA1160
Device          \Driver\Tcpip \Device\Udp                                                                                         88D6F0D8

AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                         cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                         aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device          \Driver\Tcpip \Device\RawIp                                                                                       88F4B0A8
Device          \Driver\Tcpip \Device\RawIp                                                                                       88EA1160
Device          \Driver\Tcpip \Device\RawIp                                                                                       88D6F0D8

AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                       cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                       aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)

Device          \Driver\Tcpip \Device\IPMULTICAST                                                                                 88F4B0A8
Device          \Driver\Tcpip \Device\IPMULTICAST                                                                                 88EA1160
Device          \Driver\Tcpip \Device\IPMULTICAST                                                                                 88D6F0D8
Device          \FileSystem\Cdfs \Cdfs                                                                                            B34ED400

---- EOF - GMER 1.0.15 ----
