GMER 1.0.15.15530 -
http://www.gmer.netRootkit scan 2011-01-23 16:56:29
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\IdePort2 Hitachi_HTS543232L9A300 rev.FB4OC40F
Running: kbyonxdu.exe; Driver: C:\Users\amog\AppData\Local\Temp\pxtyrpod.sys
---- System - GMER 1.0.15 ----
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwAllocateVirtualMemory [0x9083A728]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwFreeVirtualMemory [0x9083A7D8]
SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwProtectVirtualMemory [0x9083A870]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0x9084E82E]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateSection [0x9084E652]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwLoadDriver [0x9084E78C]
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) NtCreateSection
Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject
---- Kernel code sections - GMER 1.0.15 ----
.text ntkrnlpa.exe!ZwSaveKeyEx + 13AD 83243579 1 Byte [06]
.text ntkrnlpa.exe!KiDispatchInterrupt + 5A2 83267F52 19 Bytes [E0, 0F, BA, F0, 07, 73, 09, ...] {LOOPNZ 0x11; MOV EDX, 0x97307f0; MOV CR4, EAX; OR AL, 0x80; MOV CR4, EAX; RET ; MOV ECX, CR3}
.text ntkrnlpa.exe!RtlSidHashLookup + 23C 8326F73C 4 Bytes [28, A7, 83, 90]
.text ntkrnlpa.exe!RtlSidHashLookup + 3FC 8326F8FC 4 Bytes [D8, A7, 83, 90]
.text ntkrnlpa.exe!RtlSidHashLookup + 54C 8326FA4C 4 Bytes [70, A8, 83, 90]
PAGE ntkrnlpa.exe!ZwLoadDriver 833A1279 7 Bytes JMP 9084E790 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
PAGE ntkrnlpa.exe!ObMakeTemporaryObject 83408F59 5 Bytes JMP 9084A1EE \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
PAGE ntkrnlpa.exe!ObInsertObject + 27 83422C5F 5 Bytes JMP 9084BCA0 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
PAGE ntkrnlpa.exe!NtCreateSection 83430CE3 7 Bytes JMP 9084E656 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
PAGE ntkrnlpa.exe!ZwCreateProcessEx 834DAE52 7 Bytes JMP 9084E832 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
.text C:\Windows\system32\DRIVERS\atikmdag.sys section is writeable [0x9123B000, 0x227A14, 0xE8000020]
.text peauth.sys B0613C9D 28 Bytes JMP 67E1FADD
.text peauth.sys B0613CC1 28 Bytes JMP 67E1FADD
---- User code sections - GMER 1.0.15 ----
.text C:\Windows\system32\wininit.exe[440] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wininit.exe[440] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wininit.exe[440] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wininit.exe[440] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wininit.exe[440] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wininit.exe[440] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wininit.exe[440] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\services.exe[488] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsass.exe[504] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\lsm.exe[512] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\winlogon.exe[552] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[644] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[748] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[844] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Windows Media Player\wmpnetwk.exe[884] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[888] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[952] ntdll.dll!NtProtectVirtualMemory 76EC5360 5 Bytes JMP 0056000A
.text C:\Windows\system32\svchost.exe[952] ntdll.dll!NtWriteVirtualMemory 76EC5EE0 5 Bytes JMP 0057000A
.text C:\Windows\system32\svchost.exe[952] ntdll.dll!KiUserExceptionDispatcher 76EC6448 5 Bytes JMP 0055000A
.text C:\Windows\system32\svchost.exe[952] ole32.dll!CoCreateInstance 755057FC 5 Bytes JMP 006A000A
.text C:\Windows\system32\svchost.exe[952] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[952] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[952] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[952] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[952] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1112] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1248] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\spoolsv.exe[1280] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Alwil Software\Avast5\AvastSvc.exe[1400] kernel32.dll!SetUnhandledExceptionFilter 75D83142 4 Bytes [C2, 04, 00, 90] {RET 0x4; NOP }
.text C:\Windows\system32\Dwm.exe[1444] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\Dwm.exe[1444] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\Dwm.exe[1444] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\Dwm.exe[1444] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\Dwm.exe[1444] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\Dwm.exe[1444] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\Dwm.exe[1444] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\Explorer.EXE[1468] ntdll.dll!NtProtectVirtualMemory 76EC5360 5 Bytes JMP 004C000A
.text C:\Windows\Explorer.EXE[1468] ntdll.dll!NtWriteVirtualMemory 76EC5EE0 5 Bytes JMP 004D000A
.text C:\Windows\Explorer.EXE[1468] ntdll.dll!KiUserExceptionDispatcher 76EC6448 5 Bytes JMP 0023000A
.text C:\Windows\Explorer.EXE[1468] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\Explorer.EXE[1468] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\Explorer.EXE[1468] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\Explorer.EXE[1468] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\Explorer.EXE[1468] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Java\Java Update\jusched.exe[1600] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\FlashGet\flashget.exe[1612] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[1620] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1636] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\iTunes\iTunesHelper.exe[1652] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe[1660] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Update\GoogleUpdate.exe[1692] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Lite.exe[1700] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\1am Studios\iPhone FileExplorer\IPhoneFileExplorer.exe[1708] ntdll.dll!NtProtectVirtualMemory 76EC5360 5 Bytes JMP 0033000A
.text C:\Program Files\1am Studios\iPhone FileExplorer\IPhoneFileExplorer.exe[1708] ntdll.dll!NtWriteVirtualMemory 76EC5EE0 5 Bytes JMP 0034000A
.text C:\Program Files\1am Studios\iPhone FileExplorer\IPhoneFileExplorer.exe[1708] ntdll.dll!KiUserExceptionDispatcher 76EC6448 5 Bytes JMP 0032000A
.text C:\Program Files\Launchy\Launchy.exe[1716] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Launchy\Launchy.exe[1716] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Launchy\Launchy.exe[1716] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Launchy\Launchy.exe[1716] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Launchy\Launchy.exe[1716] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Launchy\Launchy.exe[1716] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Launchy\Launchy.exe[1716] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\taskhost.exe[1728] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.exe[1760] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\OpenOffice.org 3\program\soffice.bin[1768] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Synaptics\SynTP\SynTPHelper.exe[1820] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[1900] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe[2064] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Bonjour\mDNSResponder.exe[2084] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2124] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\PostgreSQL\8.4\bin\pg_ctl.exe[2316] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\System32\svchost.exe[2328] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Novatel Wireless\Mobilink\Phoenix.exe[2388] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\svchost.exe[2452] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Windows\system32\wbem\wmiprvse.exe[2712] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!LdrUnloadDll 76EDBE7F 5 Bytes JMP 64D069B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] ntdll.dll!LdrLoadDll 76EDF585 5 Bytes JMP 64D06950 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] USER32.dll!UnhookWindowsHookEx 75B3CC7B 5 Bytes JMP 64D0BCB0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] USER32.dll!UnhookWinEvent 75B3D924 5 Bytes JMP 64D0B8A0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] USER32.dll!SetWindowsHookExW 75B4210A 5 Bytes JMP 64D0BB30 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] USER32.dll!SetWinEventHook 75B4507E 5 Bytes JMP 64D0B720 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2764] USER32.dll!SetWindowsHookExA 75B66DFA 5 Bytes JMP 64D0B9B0 C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtCreateFile + 6 76EC4A16 4 Bytes [28, 00, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtCreateFile + B 76EC4A1B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtMapViewOfSection + 6 76EC5076 1 Byte [28]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtMapViewOfSection + 6 76EC5076 4 Bytes [28, 03, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtMapViewOfSection + B 76EC507B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenFile + 6 76EC5126 4 Bytes [68, 00, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenFile + B 76EC512B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenProcess + 6 76EC51D6 4 Bytes [A8, 01, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenProcess + B 76EC51DB 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenProcessToken + 6 76EC51E6 4 Bytes CALL 75EC58EC
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenProcessToken + B 76EC51EB 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenProcessTokenEx + 6 76EC51F6 4 Bytes [A8, 02, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenProcessTokenEx + B 76EC51FB 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenThread + 6 76EC5256 4 Bytes [68, 01, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenThread + B 76EC525B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenThreadToken + 6 76EC5266 4 Bytes [68, 02, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenThreadToken + B 76EC526B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenThreadTokenEx + 6 76EC5276 4 Bytes CALL 75EC597D
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtOpenThreadTokenEx + B 76EC527B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtQueryAttributesFile + 6 76EC5386 4 Bytes [A8, 00, 07, 00]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtQueryAttributesFile + B 76EC538B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtQueryFullAttributesFile + 6 76EC5436 4 Bytes CALL 75EC5B3B
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtQueryFullAttributesFile + B 76EC543B 1 Byte [E2]
.text C:\Users\amog\AppData\Local\Google\Chrome\Application\chrome.exe[2948] ntdll.dll!NtSetInformationFile + 6 76EC5A86