Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Irgentwas stimmt nicht.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 21.05.2010, 15:05   #1
niknat
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Hallo,

Ich habe hier den Laptop einer Freundin von mir, und irgentetwas stimmt hier hinten und vorne nicht.
Sie hat ihn mir gegeben, damit ich ihn mir mal genauer anschau, da sie sagte sie hätte nen Virus oder sowas drauf.
Aber ich werde nicht so ganz schlau daraus.


Hier der Log:

Code:
ATTFilter
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:57:49, on 21.05.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
C:\Windows\Explorer.EXE
C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\PLFSetI.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe
C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\ICQ6.5\ICQ.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Windows\ehome\ehmsas.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1209&m=aspire_5738
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1209&m=aspire_5738
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1209&m=aspire_5738
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1209&m=aspire_5738
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) -  - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [Skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [BackupManagerTray] "C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -k
O4 - HKLM\..\Run: [Acer ePower Management] C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe
O4 - HKLM\..\Run: [EgisTecLiveUpdate] "C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe"
O4 - HKLM\..\Run: [mwlDaemon] C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [ProductReg] "C:\Program Files\Acer\WR_PopUp\ProductReg.exe"
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WindowsSystemGuard] C:\Users\Public\winsvcn.exe
O4 - HKCU\..\Run: [Canaveral] rundll32.exe C:\Users\ANASTA~1\AppData\Local\Temp\sshnas21.dll,BackupReadW
O4 - HKCU\..\Run: [M5T8QL3YW3] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
O4 - HKCU\..\Run: [mscj.exe] C:\Users\Anastasia\AppData\Roaming\MSA\mscj.exe
O4 - HKCU\..\Run: [xmlp2pdev] rundll32.exe "C:\Users\Anastasia\AppData\Local\xmlp2pdev\xmlp2pdev.dll", DllInit
O4 - HKCU\..\Run: [mscjm.exe] C:\Users\Anastasia\AppData\Roaming\MSA\mscjm.exe
O4 - HKCU\..\Run: [userinit] C:\Users\Anastasia\AppData\Roaming\sdra64.exe
O4 - HKCU\..\Run: [dbaistyu] C:\Users\Anastasia\AppData\Local\aeebdkvum\xxdfkdptssd.exe
O4 - HKCU\..\Run: [nnonnosys] rundll32.exe "c:\users\anasta~1\appdata\local\temp\ssqqpn.dll",DllRegisterServer
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
O23 - Service: Google Desktop Manager 5.9.911.3589 (GoogleDesktopManager-110309-193829) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MyWinLocker Service (MWLService) - EgisTec Inc. - C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe
O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

--
End of file - 12075 bytes
         

Hoffe man kann mir helfen, mit Lösungsansatz auf ganz dummisch.
Ich verstehe sonst gar nichts mehr.

Alt 21.05.2010, 15:09   #2
Angel21
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Hallo,

Zitat:
O4 - HKCU\..\Run: [WindowsSystemGuard] C:\Users\Public\winsvcn.exe
O4 - HKCU\..\Run: [Canaveral] rundll32.exe C:\Users\ANASTA~1\AppData\Local\Temp\sshnas21.dll,BackupReadW
O4 - HKCU\..\Run: [M5T8QL3YW3] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
O4 - HKCU\..\Run: [mscj.exe] C:\Users\Anastasia\AppData\Roaming\MSA\mscj.exe
O4 - HKCU\..\Run: [xmlp2pdev] rundll32.exe "C:\Users\Anastasia\AppData\Local\xmlp2pdev\xmlp2pdev.dll", DllInit
O4 - HKCU\..\Run: [mscjm.exe] C:\Users\Anastasia\AppData\Roaming\MSA\mscjm.exe
O4 - HKCU\..\Run: [userinit] C:\Users\Anastasia\AppData\Roaming\sdra64.exe
O4 - HKCU\..\Run: [dbaistyu] C:\Users\Anastasia\AppData\Local\aeebdkvum\xxdfkdptssd.exe
O4 - HKCU\..\Run: [nnonnosys] rundll32.exe "c:\users\anasta~1\appdata\local\temp\ssqqpn.dll",DllRegisterServer

Da stimmt einiges nicht.

Benutze Malwarebytes nach der Anleitung. Wenn Malwarebytes durch ist und das Log erscheint gehe auf "Auswahl entfernen" und poste bei Scan-Berichte das Log in deinen Thread.

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop ( falls noch nicht vorhanden)
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles hier in den Thread.
__________________

__________________

Alt 21.05.2010, 15:14   #3
niknat
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Ja, Malwarebytes habe ich schon ausprobiert nach der Anleitung hier im Forum, nur führe ich es aus, dann fragt mich der Computer ob ich dies wirklich machen möchte(zulassen).
Nur danach wird er PC Bildschirm ganz kurz schwarz und nix passiert.
__________________

Alt 21.05.2010, 15:18   #4
Angel21
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Versuchs mal bitte mit Rechtsklick -> "als administrator starten..." Vista 64 oder 32 bit?
__________________
Avira Upgrade 10 ist auf dem Markt!
Agressive Einstellung von Avira

What goes around comes around!

Alt 21.05.2010, 15:20   #5
niknat
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Vielen dank schonmal für die antworten
Es handelt sich um ein 32.Bit System, aber auch wenn ich als Administrator ausführe, passiert genau das gleiche.


Alt 21.05.2010, 15:24   #6
Angel21
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Gut, starte mal GMER nach Anleitung, wohlmöglich kann dies durch ein Rootkit verursacht werden.
Poste Gmers Log hier her.
__________________
--> Irgentwas stimmt nicht.

Alt 21.05.2010, 15:26   #7
niknat
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Okay, das werde ich machen.
Vielen dank dir
Ich muss jetzt leider weg, mache ich aber sobald ich wieder da bin, vielen dank!!
Finde ich toll, das einem hier so schnell geholfen wird.

Alt 21.05.2010, 15:30   #8
Angel21
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Keine Ursache, wir kriegen das irgendwie geregelt
__________________
Avira Upgrade 10 ist auf dem Markt!
Agressive Einstellung von Avira

What goes around comes around!

Alt 21.05.2010, 16:31   #9
niknat
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



So, hier der GMER Scan.
also das hat ewigkeiten gedauert zu scannen, und schlau werde ich auch nicht draus, aber vielleicht kann das ja einer von euch ^^




Code:
ATTFilter
GMER 1.0.15.15281 - hxxp://www.gmer.net
Rootkit scan 2010-05-21 16:29:16
Windows 6.0.6002 Service Pack 2
Running: 40omh3d5.exe; Driver: C:\Users\ANASTA~1\AppData\Local\Temp\kgtdypog.sys


---- Kernel code sections - GMER 1.0.15 ----

.text           C:\Windows\system32\DRIVERS\nvlddmkm.sys                                                                                                                    section is writeable [0x8DE01340, 0x3EDBA7, 0xE8000020]

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe[768] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ExitWindowsEx]                 [00A51210] C:\Program Files\NewTech Infosystems\Acer Backup Manager\Pehook.dll (Backup Manager Module/NewTech Infosystems, Inc.)
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                      003851CB
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                    003850B2
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                00385117
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                            00385484
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                            00385736
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                          00385736
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                          00385484
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                          00385736
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                       003851CB
IAT             C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[788] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                        003851CB
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                          01AD51CB
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                        01AD50B2
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                    01AD5117
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                              01AD5736
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                              01AD5484
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                              01AD5736
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                           01AD51CB
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                01AD5484
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                01AD5736
IAT             C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe[1124] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                            01AD51CB
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                      003E51CB
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                    003E50B2
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                003E5117
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                            003E5484
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                            003E5736
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                          003E5484
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                          003E5736
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                       003E51CB
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                          003E5736
IAT             C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe[1308] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                        003E51CB
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                   002351CB
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                 002350B2
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                             00235117
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                         00235484
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                         00235736
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                     002351CB
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                       00235736
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                       00235484
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                       00235736
IAT             C:\Program Files\ICQ6.5\ICQ.exe[1392] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                    002351CB
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                 003C51CB
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                               003C50B2
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                           003C5117
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                       003C5484
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                       003C5736
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                     003C5736
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\shell32.dll [USER32.dll!GetClipboardData]                                     003C5484
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\shell32.dll [USER32.dll!TranslateMessage]                                     003C5736
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\shell32.dll [ntdll.dll!NtQueryDirectoryFile]                                  003C51CB
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\RtkBtMnt.exe[1576] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                   003C51CB
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                          000551CB
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                        000550B2
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                    00055117
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                00055484
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                00055736
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                              00055736
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                              00055484
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                              00055736
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                           000551CB
IAT             C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe[1816] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                            000551CB
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                          004051CB
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                        004050B2
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                    00405117
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                              00405736
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                            004051CB
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\shell32.dll [USER32.dll!GetClipboardData]                                              00405484
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\shell32.dll [USER32.dll!TranslateMessage]                                              00405736
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\shell32.dll [ntdll.dll!NtQueryDirectoryFile]                                           004051CB
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                00405484
IAT             C:\Program Files\iTunes\iTunesHelper.exe[2116] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                00405736
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                  001B51CB
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                001B50B2
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                            001B5117
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                      001B5736
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                      001B5484
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                      001B5736
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                   001B51CB
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                        001B5484
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                        001B5736
IAT             C:\Program Files\Avira\AntiVir Desktop\avgnt.exe[2360] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                    001B51CB
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                       000E51CB
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                     000E50B2
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                                 000E5117
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                             000E5484
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                             000E5736
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\shell32.dll [USER32.dll!GetClipboardData]                                                           000E5484
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\shell32.dll [USER32.dll!TranslateMessage]                                                           000E5736
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\shell32.dll [ntdll.dll!NtQueryDirectoryFile]                                                        000E51CB
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                           000E5736
IAT             C:\Windows\ehome\ehmsas.exe[2544] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                         000E51CB
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                  000A51CB
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                000A50B2
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                            000A5117
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                      000A5484
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                      000A5736
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                   000A51CB
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                      000A5736
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                        000A5484
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                        000A5736
IAT             C:\Windows\System32\rundll32.exe[2640] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                    000A51CB
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]           009651CB
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]         009650B2
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                     00965117
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]             009651CB
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                 00965484
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                 00965736
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]               00965736
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]               00965484
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]               00965736
IAT             C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe[3020] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]            009651CB
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                       019751CB
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                     019750B2
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                                 01975117
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                             01975484
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                             01975736
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                         019751CB
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\shell32.dll [USER32.dll!GetClipboardData]                                                           01975484
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\shell32.dll [USER32.dll!TranslateMessage]                                                           01975736
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\shell32.dll [ntdll.dll!NtQueryDirectoryFile]                                                        019751CB
IAT             C:\Windows\system32\Dwm.exe[3104] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                           01975736
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                   01B951CB
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                 01B950B2
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                             01B95117
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                       01B95484
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                       01B95736
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                    01B951CB
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                       01B95736
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                         01B95484
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                         01B95736
IAT             C:\Windows\system32\taskeng.exe[3144] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                     01B951CB
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                  002D51CB
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                002D50B2
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                            002D5117
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                      002D5484
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                      002D5736
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                   002D51CB
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                      002D5736
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                        002D5484
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                        002D5736
IAT             C:\Windows\System32\rundll32.exe[3208] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                    002D51CB
IAT             C:\Windows\Explorer.EXE[3216] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateThread]                                                                 [10002480] C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (PSD DragDrop Protection/EgisTec Inc.)
IAT             C:\Windows\Explorer.EXE[3216] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FreeLibraryAndExitThread]                                                     [10001DA0] C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (PSD DragDrop Protection/EgisTec Inc.)
IAT             C:\Windows\Explorer.EXE[3216] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]                                                               [100027D0] C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (PSD DragDrop Protection/EgisTec Inc.)
IAT             C:\Windows\Explorer.EXE[3216] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA]                                                                 [10001290] C:\Program Files\EgisTec\MyWinLocker 3\x86\psdprotect.dll (PSD DragDrop Protection/EgisTec Inc.)
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                      016951CB
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                    016950B2
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                01695117
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\OLE32.DLL [USER32.dll!GetClipboardData]                                            01695484
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\OLE32.DLL [USER32.dll!CreateWindowExW]                                             [00419346] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\OLE32.DLL [USER32.dll!DialogBoxParamW]                                             [004194D8] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\OLE32.DLL [USER32.dll!MessageBoxW]                                                 [004194E4] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\OLE32.DLL [USER32.dll!ShowWindow]                                                  [004193BE] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\OLE32.DLL [USER32.dll!TranslateMessage]                                            01695736
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!MessageBoxW]                                               [004194E4] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!CreateWindowExW]                                           [00419346] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!GetClipboardData]                                          01695484
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!TranslateMessage]                                          01695736
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!SetWindowPos]                                              [0041946C] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!DialogBoxParamW]                                           [004194D8] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!ShowWindow]                                                [004193BE] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [USER32.dll!MessageBoxIndirectW]                                       [004194D2] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHELL32.DLL [ntdll.dll!NtQueryDirectoryFile]                                       016951CB
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!CreateWindowExA]                                           [004192CE] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!CreateWindowExW]                                           [00419346] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                          01695736
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DialogBoxParamA]                                           [004194D8] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DialogBoxParamW]                                           [004194D8] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!MessageBoxW]                                               [004194E4] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                        016951CB
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\wininet.dll [USER32.dll!CreateWindowExW]                                           [00419346] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\wininet.dll [USER32.dll!MessageBoxW]                                               [004194E4] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\wininet.dll [USER32.dll!SetWindowPos]                                              [0041946C] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\wininet.dll [USER32.dll!DialogBoxParamW]                                           [004194D8] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe[3296] @ C:\Windows\system32\crypt32.dll [USER32.dll!MessageBoxW]                                               [004194E4] C:\Users\ANASTA~1\AppData\Local\Temp\Nvk.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                     021751CB
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                   021750B2
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                               02175117
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\OLE32.DLL [USER32.dll!GetClipboardData]                                           02175484
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\OLE32.DLL [USER32.dll!CreateWindowExW]                                            [0041844E] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\OLE32.DLL [USER32.dll!ShowWindow]                                                 [004184C8] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\OLE32.DLL [USER32.dll!TranslateMessage]                                           02175736
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\shlwapi.dll [USER32.dll!CreateWindowExA]                                          [004183D4] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\shlwapi.dll [USER32.dll!CreateWindowExW]                                          [0041844E] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\shlwapi.dll [USER32.dll!TranslateMessage]                                         02175736
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                       021751CB
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!CreateWindowExW]                                          [0041844E] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                         02175484
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                         02175736
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!SetWindowPos]                                             [0041857A] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\SHELL32.dll [USER32.dll!ShowWindow]                                               [004184C8] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                      021751CB
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\wininet.dll [USER32.dll!CreateWindowExW]                                          [0041844E] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe[3304] @ C:\Windows\system32\wininet.dll [USER32.dll!SetWindowPos]                                             [0041857A] C:\Users\Anastasia\AppData\Local\Temp\Nvl.exe
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                       002C51CB
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                     002C50B2
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                                 002C5117
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                           002C5484
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                           002C5736
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                        002C51CB
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                           002C5736
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                             002C5484
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                             002C5736
IAT             C:\Windows\ehome\ehtray.exe[3376] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                         002C51CB
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                      00DA51CB
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                    00DA50B2
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                00DA5117
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                          00DA5484
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                          00DA5736
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                       00DA51CB
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                          00DA5736
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                            00DA5484
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                            00DA5736
IAT             C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe[3496] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                        00DA51CB
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]      01A951CB
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]    01A950B2
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                01A95117
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]          01A95736
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]            01A95484
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]            01A95736
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]          01A95484
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]          01A95736
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]       01A951CB
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe[3652] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]        01A951CB
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]    01CB51CB
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]  01CB50B2
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]              01CB5117
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]          01CB5484
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]          01CB5736
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]        01CB5484
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]        01CB5736
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]     01CB51CB
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]        01CB5736
IAT             C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe[3668] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]      01CB51CB
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]    002051CB
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]  002050B2
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]              00205117
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]          00205484
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]          00205736
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]        00205736
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]        00205484
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]        00205736
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]     002051CB
IAT             C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe[3700] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]      002051CB
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                  003151CB
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                003150B2
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                            00315117
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                      00315484
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                      00315736
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                   003151CB
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                      00315736
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                        00315484
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                        00315736
IAT             C:\Windows\System32\rundll32.exe[3736] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                    003151CB
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                   00A351CB
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                 00A350B2
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                             00A35117
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                       00A35736
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                         00A35484
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                         00A35736
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                     00A351CB
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\shell32.dll [USER32.dll!GetClipboardData]                       00A35484
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\shell32.dll [USER32.dll!TranslateMessage]                       00A35736
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[3760] @ C:\Windows\system32\shell32.dll [ntdll.dll!NtQueryDirectoryFile]                    00A351CB
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                               00B751CB
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                             00B750B2
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                         00B75117
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                 00B751CB
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                   00B75484
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                   00B75736
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                00B751CB
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                   00B75736
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                     00B75484
IAT             C:\Program Files\Windows Live\Messenger\msnmsgr.exe[3860] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                     00B75736
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                             002751CB
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                           002750B2
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                       00275117
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                 00275484
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                 00275736
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                              002751CB
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                 00275736
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                               002751CB
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                   00275484
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.exe[3868] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                   00275736
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                   021A51CB
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                 021A50B2
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                             021A5117
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                         021A5484
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                         021A5736
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                       021A5736
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                       021A5484
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                       021A5736
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                    021A51CB
IAT             C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe[3872] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                     021A51CB
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                             008A51CB
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                           008A50B2
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                       008A5117
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                   008A5484
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                   008A5736
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                               008A51CB
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\shell32.dll [USER32.dll!GetClipboardData]                                                 008A5484
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\shell32.dll [USER32.dll!TranslateMessage]                                                 008A5736
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\shell32.dll [ntdll.dll!NtQueryDirectoryFile]                                              008A51CB
IAT             C:\Windows\system32\wbem\unsecapp.exe[3892] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                 008A5736
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                        001A51CB
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                      001A50B2
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                  001A5117
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                            001A5736
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                              001A5484
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                              001A5736
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                            001A5484
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                            001A5736
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                         001A51CB
IAT             C:\Program Files\Java\jre6\bin\jusched.exe[3936] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                          001A51CB
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                      01A451CB
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                    01A450B2
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                01A45117
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                          01A45736
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                            01A45484
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                            01A45736
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                          01A45484
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                          01A45736
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                       01A451CB
IAT             C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe[3956] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                        01A451CB
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                                                            003C51CB
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                                                          003C50B2
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                                                      003C5117
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                                                003C5736
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                                                003C5484
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                                                003C5736
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                                                             003C51CB
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                                                  003C5484
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                                                  003C5736
IAT             C:\Windows\PLFSetI.exe[4012] @ C:\Windows\system32\ws2_32.dll [ntdll.dll!NtQueryDirectoryFile]                                                              003C51CB
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                   034351CB
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                 034350B2
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                             03435117
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                       03435736
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                         03435484
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                         03435736
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                     034351CB
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                       03435484
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                       03435736
IAT             C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[4088] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                    034351CB
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\kernel32.dll [ntdll.dll!NtQueryDirectoryFile]                             037551CB
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrGetProcedureAddress]                           037550B2
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\kernel32.dll [ntdll.dll!LdrLoadDll]                                       03755117
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!TranslateMessage]                                 03755736
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\WS2_32.dll [ntdll.dll!NtQueryDirectoryFile]                               037551CB
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\ole32.dll [USER32.dll!GetClipboardData]                                   03755484
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\ole32.dll [USER32.dll!TranslateMessage]                                   03755736
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetClipboardData]                                 03755484
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\SHELL32.dll [USER32.dll!TranslateMessage]                                 03755736
IAT             C:\Program Files\OpenOffice.org 3\program\soffice.bin[4548] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile]                              037551CB

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                                                                      mwlPSDFilter.sys (PSD Filter Driver/Egis Incorporated.)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                                                     Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                                                                     Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice  \FileSystem\fastfat \Fat                                                                                                                                    fltmgr.sys (Microsoft Dateisystem-Filter-Manager/Microsoft Corporation)

---- Files - GMER 1.0.15 ----

File            C:\Users\Anastasia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7DRUHSYK\errorPageStrings[1]                                        0 bytes
File            C:\Users\Anastasia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7DRUHSYK\info_48[1]                                                 0 bytes
File            C:\Users\Anastasia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P0VLG3LI\dnserrordiagoff_webOC[1]                                   6914 bytes
File            C:\Users\Anastasia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P0VLG3LI\down[1]                                                    3414 bytes
File            C:\Users\Anastasia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TKC15QGH\ErrorPageTemplate[1]                                       0 bytes
File            C:\Users\Anastasia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TKC15QGH\info_48[1]                                                 0 bytes

---- EOF - GMER 1.0.15 ----
         

Alt 21.05.2010, 17:10   #10
Angel21
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Bitte mach mal den Systemscan mit Otl.
__________________
Avira Upgrade 10 ist auf dem Markt!
Agressive Einstellung von Avira

What goes around comes around!

Alt 21.05.2010, 17:31   #11
niknat
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Mhmm,
Nachdem Ich dem GMER scan hatte durchlaufen alssen, hab ich den laptop mal neuhochgefhren wie in der Anleitung.
Auf jeden fall, hab ich sehr kurz nach dem Hochfahren Malwarebytes angemaht und es hat geöffnet.
Auf jeden fall, hab ich halt mal nen Quick scan gemahct und es kamen 34 Infizierte Objekte heraus!
Ich habse mal gelöscht.
Und, naja, seid dem öffnen sich schonmal nichtmehr wahllos Fenster und Programme und Erroranzeigen.

Wars das, und ich kann Antivierenprogramm vernünftig durchlaufen lassen, und CCleaner, oder noch weiter machen'?

Alt 21.05.2010, 18:35   #12
Angel21
 
Irgentwas stimmt nicht. - Standard

Irgentwas stimmt nicht.



Gehe bei Malwarebytes auf Scan-Berichte und poste Malwarebytes Log bitte hier her.
__________________
Avira Upgrade 10 ist auf dem Markt!
Agressive Einstellung von Avira

What goes around comes around!

Antwort

Themen zu Irgentwas stimmt nicht.
adobe, agere systems, antivir, antivir guard, avg, avira, bho, bonjour, defender, desktop, google, gupdate, hijack, hijackthis, internet, internet explorer, launch, local\temp, locker, logfile, mywinlocker, object, popup, realtek, rundll, senden, skype.exe, software, system, temp, virus, vista, windows



Ähnliche Themen: Irgentwas stimmt nicht.


  1. Ich werde das Gefühl nicht los dass mit meinem Rechner etwas nicht stimmt .. (einfrieren, langsam,..)
    Log-Analyse und Auswertung - 04.05.2014 (1)
  2. Was stimmt mit meinem OS nicht?
    Log-Analyse und Auswertung - 15.03.2014 (9)
  3. Irgendetwas stimmt nicht !
    Log-Analyse und Auswertung - 14.10.2011 (17)
  4. Pipezustand stimmt nicht!
    Alles rund um Windows - 07.01.2011 (1)
  5. Firewall lässt sich nicht aktivieren. Da stimmt was nicht
    Log-Analyse und Auswertung - 25.07.2010 (24)
  6. Irgendwas stimmt nicht.
    Log-Analyse und Auswertung - 12.08.2009 (12)
  7. Irgendwas stimmt nicht
    Mülltonne - 20.08.2008 (0)
  8. Was stimmt hier nicht ?
    Log-Analyse und Auswertung - 05.07.2008 (0)
  9. da stimmt was nicht, nur was
    Log-Analyse und Auswertung - 25.11.2007 (3)
  10. irgentwas muss da falsch sein/ PC langsam
    Mülltonne - 11.09.2007 (2)
  11. irgendetwas stimmt nicht
    Log-Analyse und Auswertung - 01.05.2006 (2)
  12. Was stimmt bei mir nicht?
    Log-Analyse und Auswertung - 12.01.2006 (2)
  13. stimmt hier was nicht?
    Log-Analyse und Auswertung - 24.12.2005 (3)
  14. Irgendwas stimmt nicht ??
    Log-Analyse und Auswertung - 09.04.2005 (9)
  15. Was stimmt hier nicht?!
    Log-Analyse und Auswertung - 30.03.2005 (4)
  16. das stimmt was nicht
    Log-Analyse und Auswertung - 02.03.2005 (6)
  17. Da stimmt was nicht!
    Log-Analyse und Auswertung - 01.02.2005 (6)

Zum Thema Irgentwas stimmt nicht. - Hallo, Ich habe hier den Laptop einer Freundin von mir, und irgentetwas stimmt hier hinten und vorne nicht. Sie hat ihn mir gegeben, damit ich ihn mir mal genauer anschau, - Irgentwas stimmt nicht....
Archiv
Du betrachtest: Irgentwas stimmt nicht. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.