Panda- problem z zainstalowaniem

chalk · 8 Maj 2007 08:30

mam problem z zainstalowaniem tego antywira,

jest to wersja 2-u miesięczna z jednego z czasopism. wczesniej tez miałem pande ale chce przedłuzyc okres ochrony więc wykasowałem poprzedniczke i teraz w czasie instalacji wyskakuje mi okienko Netopsystem Size Optymizer z komunikatem “wyodrębnianie nie powiodło sie z nieznanego powodu”. Pomocy!

Dimatheus · 8 Maj 2007 09:55

Hey

Wszystko wskazuje na błąd pliku instalacyjnego. Jeśli instalujesz antywira z płytki CD, to przeczyść ją i najlepiej przegraj plik (pliki) instalacyjne na dysk i spróbuj ponownie zainstalować

Powodzenia

Dimatheus

chalk · 8 Maj 2007 10:03

No niestety to też nie pomogło.

inne programy wgrywają sie bez problemów. tylko ta panda.czy mozna cos jeszcze cos z tym zrobić. czysciłem rejestr i byc moze cos wykasowałem.

Dimatheus · 8 Maj 2007 10:14

Hej

Chyba nie bardzo

A wspomniany komunikat wyskakuje zaraz po tym jak klikniesz na instalację - nie dochodzisz do etapu, w którym wybierasz ścieżkę dostępu, rodzaj instalacji, itp, tylko zatrzymuje się na scalaniu danych ?? Bo jeśli tak, to po prostu plik jest walnięty.

Być może będziesz musiał się przesiąść na innego antywirka…

Z pozdrowieniami

Dimatheus

chalk · 8 Maj 2007 10:25

zaraz na samym początku przy przetwarzaniu pliku.

Sciągnąłem pandę z netu i jest to samo.

krzysztof7272 · 8 Maj 2007 11:06

czy wcześniej miałeś wersję próbną?

fiesta · 8 Maj 2007 11:23

Masz legalną wersję, skorzystaj z:

http://www.pandasoftware.com.pl/pomoc/zgloszenie/

grzegorzch · 8 Maj 2007 11:26

a nie masz problemu z brakiem miejsca na partycji C?? w tym momencie następuje rozpakowanie pliku instalacyjnego do jakiegoś katalogu tymczasowego na C.

De_Niro · 9 Maj 2007 08:25

a jakie komunikat się pojawia jak chcesz zainstalować antywira :?:

P.S

Jak możesz to podaj LOG Gmera, tam będzie widoczne czy są jakieś pozostałości po starym antywirusie.

chalk · 9 Maj 2007 09:42

Wyskakuje komunikat Netopsystem Size Optymizer o treści :" Wyodrębnianie nie powiodło się z nieznanego powodu. Program został zamknięty. Instalacja nie powiodła się info ID 6702.498.201.2.10056."Plytka instalacyjna na 100 % jest OK.W chwili obecnej zainstalowałem sobie avg tak “awaryjnie”, no ale chciałbym tą pandę bo wg mnie jest lepsza. A oto log z gmera:

GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-05-09 11:40:45 Windows 5.1.2600 Dodatek Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwClose SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwCreateFile SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwCreateKey SSDT Vax347b.sys ZwCreatePagingFile SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwCreateProcess SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwCreateProcessEx SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwCreateThread SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwDeleteFile SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwDeleteKey SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwDeleteValueKey SSDT Vax347b.sys ZwEnumerateKey SSDT Vax347b.sys ZwEnumerateValueKey SSDT \SystemRoot\system32\drivers\khips.sys ZwLoadDriver SSDT \SystemRoot\system32\drivers\khips.sys ZwMapViewOfSection SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwOpenFile SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwOpenKey SSDT Vax347b.sys ZwQueryKey SSDT Vax347b.sys ZwQueryValueKey SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwResumeThread SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwSetInformationFile SSDT Vax347b.sys ZwSetSystemPowerState SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwSetValueKey SSDT \SystemRoot\system32\drivers\fwdrv.sys ZwWriteFile ---- Kernel code sections - GMER 1.0.12 ---- PAGENDSM NDIS.sys!NdisMIndicateStatus F83B1A5F 6 Bytes JMP BAF56C5E \SystemRoot\system32\drivers\fwdrv.sys ---- User code sections - GMER 1.0.12 ---- .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001301A8 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00130090 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00130694 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001302C0 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00130234 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00130004 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0013011C .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001304F0 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0013057C .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001303D8 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0013034C .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00130464 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00130608 .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001307AC .text C:\DOCUME~1\Blemer\USTAWI~1\Temp\Rar$EX02.766\gmer.exe[596] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00130720 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001601A8 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00160090 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00160694 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!CreateProcessW 7C802332 5 Bytes JMP 001602C0 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!CreateProcessA 7C802367 5 Bytes JMP 00160234 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00160004 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0016011C .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001604F0 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!CreateThread 7C810637 5 Bytes JMP 0016057C .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001603D8 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0016034C .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!WinExec 7C86136D 5 Bytes JMP 00160464 .text C:\WINDOWS\system32\csrss.exe[644] KERNEL32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00160608 .text C:\WINDOWS\system32\csrss.exe[644] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001607AC .text C:\WINDOWS\system32\csrss.exe[644] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00160720 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\services.exe[716] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\services.exe[716] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\services.exe[716] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\services.exe[716] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\services.exe[716] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\services.exe[716] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\lsass.exe[728] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\lsass.exe[728] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\lsass.exe[728] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\lsass.exe[728] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\lsass.exe[728] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\lsass.exe[728] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\svchost.exe[884] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\svchost.exe[884] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\svchost.exe[884] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\svchost.exe[884] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\svchost.exe[884] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\svchost.exe[884] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\svchost.exe[948] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\svchost.exe[948] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\svchost.exe[948] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\svchost.exe[948] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\svchost.exe[948] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\svchost.exe[948] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\svchost.exe[976] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\svchost.exe[976] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\svchost.exe[976] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\svchost.exe[976] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\svchost.exe[976] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\svchost.exe[976] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\svchost.exe[976] WININET.dll!InternetOpenW 771AAEFD 5 Bytes JMP 00080DB0 .text C:\WINDOWS\system32\svchost.exe[976] WININET.dll!InternetConnectA 771B30C3 5 Bytes JMP 00080F54 .text C:\WINDOWS\system32\svchost.exe[976] WININET.dll!InternetOpenA 771B58BA 5 Bytes JMP 00080D24 .text C:\WINDOWS\system32\svchost.exe[976] WININET.dll!InternetOpenUrlA 771B5B6D 5 Bytes JMP 00080E3C .text C:\WINDOWS\system32\svchost.exe[976] WININET.dll!InternetConnectW 771BEE00 5 Bytes JMP 00080FE0 .text C:\WINDOWS\system32\svchost.exe[976] WININET.dll!InternetOpenUrlW 771C5B52 5 Bytes JMP 00080EC8 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\svchost.exe[1028] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\svchost.exe[1028] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\svchost.exe[1028] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\svchost.exe[1028] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\svchost.exe[1028] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\svchost.exe[1028] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001301A8 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00130090 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00130694 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001302C0 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00130234 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00130004 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0013011C .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001304F0 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0013057C .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001303D8 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0013034C .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00130464 .text C:\WINDOWS\system32\ati2evxx.exe[1100] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00130608 .text C:\WINDOWS\system32\ati2evxx.exe[1100] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001307AC .text C:\WINDOWS\system32\ati2evxx.exe[1100] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00130720 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\svchost.exe[1140] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\svchost.exe[1140] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\svchost.exe[1140] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\svchost.exe[1140] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\svchost.exe[1140] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\svchost.exe[1140] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\svchost.exe[1140] WININET.dll!InternetOpenW 771AAEFD 5 Bytes JMP 00080DB0 .text C:\WINDOWS\system32\svchost.exe[1140] WININET.dll!InternetConnectA 771B30C3 5 Bytes JMP 00080F54 .text C:\WINDOWS\system32\svchost.exe[1140] WININET.dll!InternetOpenA 771B58BA 5 Bytes JMP 00080D24 .text C:\WINDOWS\system32\svchost.exe[1140] WININET.dll!InternetOpenUrlA 771B5B6D 5 Bytes JMP 00080E3C .text C:\WINDOWS\system32\svchost.exe[1140] WININET.dll!InternetConnectW 771BEE00 5 Bytes JMP 00080FE0 .text C:\WINDOWS\system32\svchost.exe[1140] WININET.dll!InternetOpenUrlW 771C5B52 5 Bytes JMP 00080EC8 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001401A8 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00140090 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00140694 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001402C0 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00140234 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00140004 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0014011C .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001404F0 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0014057C .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001403D8 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0014034C .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00140464 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00140608 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] WS2_32.dll!socket 71A53B91 5 Bytes JMP 001408C4 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00140838 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00140950 .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001407AC .text C:\PROGRA~1\MOZILL~1\firefox.exe[1240] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00140720 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\spoolsv.exe[1348] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\spoolsv.exe[1348] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\spoolsv.exe[1348] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\spoolsv.exe[1348] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\spoolsv.exe[1348] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\spoolsv.exe[1348] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\wuauclt.exe[1404] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\wuauclt.exe[1404] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\wuauclt.exe[1404] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\wuauclt.exe[1404] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\wuauclt.exe[1404] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\wuauclt.exe[1404] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\explorer.exe[1540] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\explorer.exe[1540] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\explorer.exe[1540] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\explorer.exe[1540] WININET.dll!InternetOpenW 771AAEFD 5 Bytes JMP 00080DB0 .text C:\WINDOWS\explorer.exe[1540] WININET.dll!InternetConnectA 771B30C3 5 Bytes JMP 00080F54 .text C:\WINDOWS\explorer.exe[1540] WININET.dll!InternetOpenA 771B58BA 5 Bytes JMP 00080D24 .text C:\WINDOWS\explorer.exe[1540] WININET.dll!InternetOpenUrlA 771B5B6D 5 Bytes JMP 00080E3C .text C:\WINDOWS\explorer.exe[1540] WININET.dll!InternetConnectW 771BEE00 5 Bytes JMP 00080FE0 .text C:\WINDOWS\explorer.exe[1540] WININET.dll!InternetOpenUrlW 771C5B52 5 Bytes JMP 00080EC8 .text C:\WINDOWS\explorer.exe[1540] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\explorer.exe[1540] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\explorer.exe[1540] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001301A8 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00130090 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00130694 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001302C0 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00130234 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00130004 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0013011C .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001304F0 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0013057C .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001303D8 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0013034C .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00130464 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00130608 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001307AC .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00130720 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] WS2_32.dll!socket 71A53B91 5 Bytes JMP 001308C4 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00130838 .text C:\PROGRA~1\Grisoft\AVG7\avgemc.exe[1676] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00130950 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001301A8 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00130090 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00130694 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001302C0 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00130234 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00130004 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0013011C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001304F0 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0013057C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001303D8 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0013034C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00130464 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00130608 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001307AC .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00130720 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] WS2_32.dll!socket 71A53B91 5 Bytes JMP 001308C4 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00130838 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe[1728] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00130950 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000301A8 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00030090 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00030694 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000302C0 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00030234 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00030004 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0003011C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000304F0 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0003057C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000303D8 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0003034C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00030464 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00030608 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000307AC .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00030720 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000308C4 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00030838 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00030950 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WININET.dll!InternetOpenW 771AAEFD 5 Bytes JMP 00030DB0 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WININET.dll!InternetConnectA 771B30C3 5 Bytes JMP 00030F54 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WININET.dll!InternetOpenA 771B58BA 5 Bytes JMP 00030D24 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WININET.dll!InternetOpenUrlA 771B5B6D 5 Bytes JMP 00030E3C .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WININET.dll!InternetConnectW 771BEE00 5 Bytes JMP 00030FE0 .text C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe[1840] WININET.dll!InternetOpenUrlW 771C5B52 5 Bytes JMP 00030EC8 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 000801A8 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00080090 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00080694 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 000802C0 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00080234 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00080004 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0008011C .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 000804F0 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0008057C .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 000803D8 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0008034C .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00080464 .text C:\WINDOWS\system32\wuauclt.exe[2080] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00080608 .text C:\WINDOWS\system32\wuauclt.exe[2080] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 000807AC .text C:\WINDOWS\system32\wuauclt.exe[2080] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00080720 .text C:\WINDOWS\system32\wuauclt.exe[2080] WS2_32.dll!socket 71A53B91 5 Bytes JMP 000808C4 .text C:\WINDOWS\system32\wuauclt.exe[2080] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00080838 .text C:\WINDOWS\system32\wuauclt.exe[2080] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00080950 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 003401A8 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00340090 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00340694 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 003402C0 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00340234 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00340004 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0034011C .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 003404F0 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0034057C .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 003403D8 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0034034C .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00340464 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00340608 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] user32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 003407AC .text C:\Program Files\Gadu-Gadu\gg.exe[2140] user32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00340720 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WS2_32.dll!socket 71A53B91 5 Bytes JMP 003408C4 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00340838 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00340950 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WININET.dll!InternetOpenW 771AAEFD 5 Bytes JMP 00340DB0 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WININET.dll!InternetConnectA 771B30C3 5 Bytes JMP 00340F54 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WININET.dll!InternetOpenA 771B58BA 5 Bytes JMP 00340D24 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WININET.dll!InternetOpenUrlA 771B5B6D 5 Bytes JMP 00340E3C .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WININET.dll!InternetConnectW 771BEE00 5 Bytes JMP 00340FE0 .text C:\Program Files\Gadu-Gadu\gg.exe[2140] WININET.dll!InternetOpenUrlW 771C5B52 5 Bytes JMP 00340EC8 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001401A8 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00140090 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00140694 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001402C0 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00140234 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00140004 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0014011C .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001404F0 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0014057C .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001403D8 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0014034C .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00140464 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00140608 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001407AC .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00140720 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] WS2_32.dll!socket 71A53B91 5 Bytes JMP 001408C4 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] WS2_32.dll!bind 71A53E00 5 Bytes JMP 00140838 .text C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe[2344] WS2_32.dll!connect 71A5406A 5 Bytes JMP 00140950 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!VirtualProtectEx 7C801A5D 5 Bytes JMP 001401A8 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 00140090 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!WriteProcessMemory 7C80220F 5 Bytes JMP 00140694 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 001402C0 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 00140234 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!VirtualAlloc 7C809A51 5 Bytes JMP 00140004 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!VirtualAllocEx 7C809A72 5 Bytes JMP 0014011C .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!CreateRemoteThread 7C81042C 5 Bytes JMP 001404F0 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!CreateThread 7C810637 5 Bytes JMP 0014057C .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 001403D8 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!CreateProcessInternalA 7C81DDD6 5 Bytes JMP 0014034C .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!WinExec 7C86136D 5 Bytes JMP 00140464 .text C:\Program Files\Winamp\winamp.exe[2584] kernel32.dll!SetThreadContext 7C862AA5 5 Bytes JMP 00140608 .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!SetScrollInfo 7E369056 7 Bytes JMP 016A9E46 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!GetScrollInfo 7E370DA2 7 Bytes JMP 016A9DCE C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!SetWindowsHookExW 7E37DDB5 5 Bytes JMP 001407AC .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!ShowScrollBar 7E37F2B3 5 Bytes JMP 016A9ECA C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!GetScrollPos 7E37F6C4 5 Bytes JMP 016A9DF6 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!SetScrollPos 7E37F710 5 Bytes JMP 016A9E71 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!GetScrollRange 7E37F747 5 Bytes JMP 016A9E1B C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!SetScrollRange 7E37F95B 5 Bytes JMP 016A9E9C C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!SetWindowsHookExA 7E3811D1 5 Bytes JMP 00140720 .text C:\Program Files\Winamp\winamp.exe[2584] USER32.dll!EnableScrollBar 7E3B7DDD 7 Bytes JMP 016A9DA6 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[2584] WININET.dll!InternetOpenW 771AAEFD 5 Bytes JMP 00140DB0 .text C:\Program Files\Winamp\winamp.exe[2584] WININET.dll!InternetConnectA 771B30C3 5 Bytes JMP 00140F54 .text C:\Program Files\Winamp\winamp.exe[2584] WININET.dll!InternetOpenA 771B58BA 5 Bytes JMP 00140D24 .text C:\Program Files\Winamp\winamp.exe[2584] WININET.dll!InternetOpenUrlA 771B5B6D 5 Bytes JMP 00140E3C .text C:\Program Files\Winamp\winamp.exe[2584] WININET.dll!Interne