PC-HELP.CZ

Zdavím, v poslední době se mi dost zpomalil PC, chtěl bych požádat o kontrolu logu.

Díky, Eden.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:57:57, on 10.4.2014
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Logitech Gaming Software\LCore.exe
C:\Program Files\HP\Digital Imaging\bin\HpqSRmon.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\spool\drivers\w32x86\3\CNAP2LAK.EXE
C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAP2RPK.EXE
C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAB8SWK.EXE
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://trovi.com?SearchSource=10&CUI=&U ... =CT1750559
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\Tomáš\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_error.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: BS Player ControlBar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\Tomáš\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_error.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: BS Player ControlBar Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Users\Tomáš\AppData\LocalLow\BS_Player_ControlBar\prxtbBS_error.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized
O4 - HKLM\..\Run: [NvBackend] "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [CNAP2 Launcher] C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAP2LAK.EXE
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Zobrazit nebo skrýt HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Toolbar Service (TBSrv) - ClientConnect Ltd. - C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe

--
End of file - 6542 bytes

Pak si doinstaluj SP1

Stáhni si ATF Cleaner
Poklepej na ATF Cleaner.exe, klikni na select all found, poté:
-Když používáš Firefox (Mozzila), klikni na Firefox nahoře a vyber: Select All, poté klikni na Empty Selected.
-Když používáš Operu, klikni nahoře na Operu a vyber: Select All, poté klikni na Empty Selected. Poté klikni na Main (hlavní stránku ) a klikni na Empty Selected.
Po vyčištění klikni na Exit k zavření programu.
ATF-Cleaner je jednoduchý nástroj na odstranění historie z webového prohlížeče. Program dokáže odstranit cache, cookies, historii a další stopy po surfování na Internetu. Mezi podporované prohlížeče patří Internet Explorer, Firefox a Opera. Aplikace navíc umí odstranit dočasné soubory Windows, vysypat koš atd.

- Pokud používáš jen Google Chrome , tak ATF nemusíš použít.


Stáhni si TFC
Otevři soubor a zavři všechny ostatní okna, Klikni na Start k zahájení procesu. Program by neměl trvat dlouho.
Poté by se měl PC restartovat, pokud ne , proveď sám.

Stáhni AdwCleaner (by Xplode)

Ulož si ho na svojí plochu
Ukonči všechny programy , okna a prohlížeče
Spusť program poklepáním a klikni na „Prohledat-Scan“
Po skenu se objeví log ( jinak je uložen systémovem disku jako AdwCleaner[R?].txt), jeho obsah sem celý vlož.

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spusť v nouz. režimu.

Díky za odpověď,

ATF Cleaner - přeskakuju, používám jen Google Chrome

TFC- Complete

# AdwCleaner v3.023 - Report created 10/04/2014 at 19:39:52
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Professional (32 bits)
# Username : Tomáš - STROJ
# Running from : C:\Users\Tomáš\Desktop\adwcleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\END

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\AppDataLow\Software\SmartBar
Key Found : HKCU\Software\AppDataLow\Toolbar
Key Found : HKCU\Software\Conduit
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Key Found : HKLM\Software\Conduit
Key Found : HKLM\Software\Solvusoft

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7600.16385

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://trovi.com?SearchSource=10&CUI=&U ... =CT1750559

-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Kluci\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1350 octets] - [10/04/2014 19:07:40]
AdwCleaner[R1].txt - [1410 octets] - [10/04/2014 19:16:30]
AdwCleaner[R2].txt - [1330 octets] - [10/04/2014 19:39:52]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1390 octets] ##########

-----------------------------------------------------------------------------------------------------------------------

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10.4.2014
Scan Time: 19:36:30
Logfile: scan-antimalware.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.10.07
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7
CPU: x86
File System: NTFS
User: TomA!A!

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 276438
Time Elapsed: 5 min, 8 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 2
Riskware.BitcoinMiner, C:\Users\Kluci\Downloads\Minecraft-1.7.2.exe, , [228db3755328330377b248f33fc2d729],
PUP.Optional.OpenCandy, C:\Users\Milan\Downloads\DTLite-setup.exe, , [af004bdd94e7db5b31cca19e27dde31d],

Physical Sectors: 0
(No malicious items detected)


(end)

V obou nech vše smazat a dodej logy po smazání

Stáhni si Junkware Removal Tool

na svojí plochu.
Deaktivuj si svůj antivirový program.
Pravým tl. myši klikni na JRT.exe a vyber „spustit jako správce“. Pro pokračování budeš vyzván ke stisknutí jakékoliv klávesy. Na nějakou klikni.
Začne skenování programu. Skenování může trvat dloho , podle množství nákaz. Po ukončení skenu se objeví log (JRT.txt) , který se uloží na ploše.
Zkopíruj sem prosím celý jeho obsah.


Stáhni si RogueKiller
32bit.:
http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe
64bit.:
http://www.sur-la-toile.com/RogueKiller ... lerX64.exe
na svojí plochu.
- Zavři všechny ostatní programy a prohlížeče.
- Pro OS Vista a win7 spusť program RogueKiller.exe jako správce , u XP poklepáním.
- počkej až skončí Prescan -vyhledávání škodlivých procesů.
- Zkontroluj , zda máš zaškrtnuto:
Kontrola MBR
Kontrola Faked
Antirootkit
-Potom klikni na „Prohledat“.
- Program skenuje procesy PC. Po proskenování klikni na „Zpráva“celý obsah logu sem zkopíruj.
Pokud je program blokován , zkus ho spustit několikrát. Pokud dále program nepůjde spustit a pracovat, přejmenuj ho na winlogon.exe.

Logy po smazání:

AdwCleaner

# AdwCleaner v3.023 - Report created 10/04/2014 at 20:08:37
# Updated 01/04/2014 by Xplode
# Operating System : Windows 7 Professional (32 bits)
# Username : Tomáš - STROJ
# Running from : C:\Users\Tomáš\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

File Deleted : C:\END

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT1750559
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\Solvusoft

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7600.16385

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Google Chrome v34.0.1847.116

[ File : C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Kluci\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Tomáš\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [1350 octets] - [10/04/2014 19:07:40]
AdwCleaner[R1].txt - [1410 octets] - [10/04/2014 19:16:30]
AdwCleaner[R2].txt - [1463 octets] - [10/04/2014 19:39:52]
AdwCleaner[R3].txt - [1530 octets] - [10/04/2014 20:07:57]
AdwCleaner[S0].txt - [1408 octets] - [10/04/2014 20:08:37]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1468 octets] ##########

--------------------------------------------------------------------------------------------------------------------------

Malwarebytes


Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10.4.2014
Scan Time: 20:38:39
Logfile: Malwarebytes--log po smazani.txt
Administrator: Yes

Version: 2.00.1.1004
Malware Database: v2014.04.10.07
Rootkit Database: v2014.03.27.01
License: Trial
Malware Protection: Enabled
Malicious Website Protection: Enabled
Chameleon: Disabled

OS: Windows 7
CPU: x86
File System: NTFS
User: TomA!A!

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 276351
Time Elapsed: 4 min, 40 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Shuriken: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

Log z JRT:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 7 Professional x86
Ran by Tom ç on źt 10.04.2014 at 20:46:18,56
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{B8D563F4-7755-4C58-B22D-C6E1C49B6C22}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}



~~~ Files



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 10.04.2014 at 20:48:23,05
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log z ROgue Killer:

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7600 ) 32 bits version
Spuštěno v : Normální režim
Uživatel : Tomáš [Práva správce]
Mód : Kontrola -- Datum : 04/10/2014 20:52:53
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 7 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> NALEZENO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NALEZENO
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NALEZENO
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NALEZENO
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] EAT @explorer.exe (BeginBufferedAnimation) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745309AE)
[Address] EAT @explorer.exe (BeginBufferedPaint) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745249A1)
[Address] EAT @explorer.exe (BeginPanningFeedback) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74550731)
[Address] EAT @explorer.exe (BufferedPaintClear) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74526395)
[Address] EAT @explorer.exe (BufferedPaintInit) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452940E)
[Address] EAT @explorer.exe (BufferedPaintRenderAnimation) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745308ED)
[Address] EAT @explorer.exe (BufferedPaintSetAlpha) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7453E6B3)
[Address] EAT @explorer.exe (BufferedPaintStopAllAnimations) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7453D395)
[Address] EAT @explorer.exe (BufferedPaintUnInit) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745294AB)
[Address] EAT @explorer.exe (CloseThemeData) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74526A18)
[Address] EAT @explorer.exe (DrawThemeBackground) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74523982)
[Address] EAT @explorer.exe (DrawThemeBackgroundEx) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7453D9DA)
[Address] EAT @explorer.exe (DrawThemeEdge) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74543B52)
[Address] EAT @explorer.exe (DrawThemeIcon) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745535E7)
[Address] EAT @explorer.exe (DrawThemeParentBackground) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745253E5)
[Address] EAT @explorer.exe (DrawThemeParentBackgroundEx) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745251BF)
[Address] EAT @explorer.exe (DrawThemeText) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74524EA1)
[Address] EAT @explorer.exe (DrawThemeTextEx) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745263E6)
[Address] EAT @explorer.exe (EnableThemeDialogTexture) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452FCAF)
[Address] EAT @explorer.exe (EnableTheming) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552FEB)
[Address] EAT @explorer.exe (EndBufferedAnimation) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74523F9A)
[Address] EAT @explorer.exe (EndBufferedPaint) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74523F9A)
[Address] EAT @explorer.exe (EndPanningFeedback) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745506CC)
[Address] EAT @explorer.exe (GetBufferedPaintBits) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74524BAF)
[Address] EAT @explorer.exe (GetBufferedPaintDC) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745304BC)
[Address] EAT @explorer.exe (GetBufferedPaintTargetDC) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74530473)
[Address] EAT @explorer.exe (GetBufferedPaintTargetRect) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552E7F)
[Address] EAT @explorer.exe (GetCurrentThemeName) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745305DD)
[Address] EAT @explorer.exe (GetThemeAppProperties) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74530FB1)
[Address] EAT @explorer.exe (GetThemeBackgroundContentRect) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452CD2E)
[Address] EAT @explorer.exe (GetThemeBackgroundExtent) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452F8BF)
[Address] EAT @explorer.exe (GetThemeBackgroundRegion) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7453165D)
[Address] EAT @explorer.exe (GetThemeBitmap) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452BF93)
[Address] EAT @explorer.exe (GetThemeBool) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74527C1F)
[Address] EAT @explorer.exe (GetThemeColor) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452616C)
[Address] EAT @explorer.exe (GetThemeDocumentationProperty) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552932)
[Address] EAT @explorer.exe (GetThemeEnumValue) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452616C)
[Address] EAT @explorer.exe (GetThemeFilename) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552412)
[Address] EAT @explorer.exe (GetThemeFont) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452FF21)
[Address] EAT @explorer.exe (GetThemeInt) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452616C)
[Address] EAT @explorer.exe (GetThemeIntList) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745523B1)
[Address] EAT @explorer.exe (GetThemeMargins) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745286E9)
[Address] EAT @explorer.exe (GetThemeMetric) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745306E2)
[Address] EAT @explorer.exe (GetThemePartSize) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452CDB1)
[Address] EAT @explorer.exe (GetThemePosition) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552350)
[Address] EAT @explorer.exe (GetThemePropertyOrigin) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74543FBB)
[Address] EAT @explorer.exe (GetThemeRect) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74533611)
[Address] EAT @explorer.exe (GetThemeStream) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745339D9)
[Address] EAT @explorer.exe (GetThemeString) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745522E4)
[Address] EAT @explorer.exe (GetThemeSysBool) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74553172)
[Address] EAT @explorer.exe (GetThemeSysColor) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74543274)
[Address] EAT @explorer.exe (GetThemeSysColorBrush) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7455301E)
[Address] EAT @explorer.exe (GetThemeSysFont) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745529C4)
[Address] EAT @explorer.exe (GetThemeSysInt) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552BD3)
[Address] EAT @explorer.exe (GetThemeSysSize) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7455320B)
[Address] EAT @explorer.exe (GetThemeSysString) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74552B3F)
[Address] EAT @explorer.exe (GetThemeTextExtent) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74522D57)
[Address] EAT @explorer.exe (GetThemeTextMetrics) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452F992)
[Address] EAT @explorer.exe (GetThemeTransitionDuration) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74531081)
[Address] EAT @explorer.exe (GetWindowTheme) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452DF46)
[Address] EAT @explorer.exe (HitTestThemeBackground) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74533CE3)
[Address] EAT @explorer.exe (IsAppThemed) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452F869)
[Address] EAT @explorer.exe (IsCompositionActive) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74522E9A)
[Address] EAT @explorer.exe (IsThemeActive) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452F785)
[Address] EAT @explorer.exe (IsThemeBackgroundPartiallyTransparent) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745260AB)
[Address] EAT @explorer.exe (IsThemeDialogTextureEnabled) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7455312B)
[Address] EAT @explorer.exe (IsThemePartDefined) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745285B4)
[Address] EAT @explorer.exe (OpenThemeData) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x745273D2)
[Address] EAT @explorer.exe (OpenThemeDataEx) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74543D43)
[Address] EAT @explorer.exe (SetThemeAppProperties) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74553296)
[Address] EAT @explorer.exe (SetWindowTheme) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x74530134)
[Address] EAT @explorer.exe (SetWindowThemeAttribute) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7453CFE6)
[Address] EAT @explorer.exe (ThemeInitApiHook) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7452B176)
[Address] EAT @explorer.exe (UpdatePanningFeedback) : POWRPROF.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x7455068D)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) SAMSUNG HD322HJ ATA Device +++++
--- User ---
[MBR] 8f03824adc3ffdf90b35219742383d45
[BSP] 30bb87029c9ec59b159287e28537e053 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 99998 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 204797952 | Size: 205244 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Generic USB SD Reader USB Device +++++
Error reading User MBR! ([0x15] Za?ízení není p?ipraveno. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Po?adavek není podporován. )

+++++ PhysicalDrive2: (\\.\PHYSICALDRIVE2 @ USB) Apacer Technology Inc. USB Device +++++
--- User ---
[MBR] 1e5b3b08f06a2f10281f3db19d18e6c8
[BSP] 0d3e1ce54ed5b9a1cd88c71cd087ee1c : Empty MBR Code
Partition table:
0 - [ACTIVE] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 63 | Size: 305242 MB
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Po?adavek není podporován. )

Dokončeno : << RKreport[0]_S_04102014_205253.txt >>

Zavři všechny programy a prohlížeče. Deaktivuj antivir a firewall.
Prosím, odpoj všechny USB nebo externí disky z počítače před spuštěním tohoto programu.
Spusť RogueKiller ( Pro Windows Vista nebo Windows 7, klepni pravým a vyber "Spustit jako správce", ve Windows XP poklepej ke spuštění).
- Počkej, až Prescan dokončí práci...
- Počkej, dokud status okno zobrazuje "Prohledat "
- Klikni na "Smazat"
- Počkej, dokud Status box zobrazuje " Mazání dokončeno "
- Klikni na "Zpráva " a zkopíruj a vlož obsah té zprávy prosím sem. Log je možno nalézt v RKreport [číslo]. txt na ploše.
- Zavři RogueKiller


Stáhni si TDSSKiller
Na svojí plochu.Ujisti se , že máš zavřeny všechny ostatní aplikace a prohlížeče. Rozbal soubor a spusť TDSSKiller.exe. Restartuj PC . Log z TDSSKilleru najdeš zde:
C:\TDSSKiller. 2.8.16.0_(datum)_log.txt , vlož sem prosím celý obsah logu.
-pokud bude mít log více než 60.000 znaků , rozděl ho a vlož do více příspěvků

Log z Rogue Killer:

RogueKiller V8.8.15 [Mar 27 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Podpora : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
: http://www.adlice.com

Operační systém : Windows 7 (6.1.7600 ) 32 bits version
Spuštěno v : Normální režim
Uživatel : Tomáš [Práva správce]
Mód : Odebrat -- Datum : 04/11/2014 14:36:11
| ARK || FAK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 7 ¤¤¤
[HJ POL][PUM] HKCU\[...]\System : DisableTaskMgr (0) -> VYMAZÁNO
[HJ POL][PUM] HKCU\[...]\System : DisableRegistryTools (0) -> VYMAZÁNO
[HJ POL][PUM] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> NAHRAZENO (2)
[HJ POL][PUM] HKLM\[...]\System : EnableLUA (0) -> NAHRAZENO (1)
[HJ SMENU][PUM] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> NAHRAZENO (1)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRAZENO (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ naplánované úlohy : 0 ¤¤¤

¤¤¤ spuštění položky : 0 ¤¤¤

¤¤¤ Webové prohlížeče : 0 ¤¤¤

¤¤¤ Browser Addons : 0 ¤¤¤

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤
[Address] EAT @explorer.exe (GdipAddPathArc) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA748F)
[Address] EAT @explorer.exe (GdipAddPathArcI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7562)
[Address] EAT @explorer.exe (GdipAddPathBezier) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA75D8)
[Address] EAT @explorer.exe (GdipAddPathBezierI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA76BD)
[Address] EAT @explorer.exe (GdipAddPathBeziers) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7741)
[Address] EAT @explorer.exe (GdipAddPathBeziersI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7801)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7EDE)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA80A7)
[Address] EAT @explorer.exe (GdipAddPathClosedCurve2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA816E)
[Address] EAT @explorer.exe (GdipAddPathClosedCurveI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7F9E)
[Address] EAT @explorer.exe (GdipAddPathCurve) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA790A)
[Address] EAT @explorer.exe (GdipAddPathCurve2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7AF6)
[Address] EAT @explorer.exe (GdipAddPathCurve2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7BC4)
[Address] EAT @explorer.exe (GdipAddPathCurve3) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7CF7)
[Address] EAT @explorer.exe (GdipAddPathCurve3I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7DC8)
[Address] EAT @explorer.exe (GdipAddPathCurveI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA79CA)
[Address] EAT @explorer.exe (GdipAddPathEllipse) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8571)
[Address] EAT @explorer.exe (GdipAddPathEllipseI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8630)
[Address] EAT @explorer.exe (GdipAddPathLine) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA719D)
[Address] EAT @explorer.exe (GdipAddPathLine2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA72C6)
[Address] EAT @explorer.exe (GdipAddPathLine2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7386)
[Address] EAT @explorer.exe (GdipAddPathLineI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA725E)
[Address] EAT @explorer.exe (GdipAddPathPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA89AA)
[Address] EAT @explorer.exe (GdipAddPathPie) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8698)
[Address] EAT @explorer.exe (GdipAddPathPieI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA876B)
[Address] EAT @explorer.exe (GdipAddPathPolygon) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA87E1)
[Address] EAT @explorer.exe (GdipAddPathPolygonI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA88A1)
[Address] EAT @explorer.exe (GdipAddPathRectangle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA827E)
[Address] EAT @explorer.exe (GdipAddPathRectangleI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA833F)
[Address] EAT @explorer.exe (GdipAddPathRectangles) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA83A7)
[Address] EAT @explorer.exe (GdipAddPathRectanglesI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8467)
[Address] EAT @explorer.exe (GdipAddPathString) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8A53)
[Address] EAT @explorer.exe (GdipAddPathStringI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8BCC)
[Address] EAT @explorer.exe (GdipAlloc) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2494)
[Address] EAT @explorer.exe (GdipBeginContainer) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0E27)
[Address] EAT @explorer.exe (GdipBeginContainer2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0F28)
[Address] EAT @explorer.exe (GdipBeginContainerI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0FEC)
[Address] EAT @explorer.exe (GdipBitmapApplyEffect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB72D0)
[Address] EAT @explorer.exe (GdipBitmapConvertFormat) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7065)
[Address] EAT @explorer.exe (GdipBitmapCreateApplyEffect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7233)
[Address] EAT @explorer.exe (GdipBitmapGetHistogram) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7384)
[Address] EAT @explorer.exe (GdipBitmapGetHistogramSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7459)
[Address] EAT @explorer.exe (GdipBitmapGetPixel) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6CC3)
[Address] EAT @explorer.exe (GdipBitmapLockBits) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6B4C)
[Address] EAT @explorer.exe (GdipBitmapSetPixel) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6D89)
[Address] EAT @explorer.exe (GdipBitmapSetResolution) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB75F8)
[Address] EAT @explorer.exe (GdipBitmapUnlockBits) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6C0C)
[Address] EAT @explorer.exe (GdipClearPathMarkers) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6F9D)
[Address] EAT @explorer.exe (GdipCloneBitmapArea) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6BFC)
[Address] EAT @explorer.exe (GdipCloneBitmapAreaI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6A58)
[Address] EAT @explorer.exe (GdipCloneBrush) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD847)
[Address] EAT @explorer.exe (GdipCloneCustomLineCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2E7E)
[Address] EAT @explorer.exe (GdipCloneFont) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3013)
[Address] EAT @explorer.exe (GdipCloneFontFamily) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC29E4)
[Address] EAT @explorer.exe (GdipCloneImage) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4C59)
[Address] EAT @explorer.exe (GdipCloneImageAttributes) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB777A)
[Address] EAT @explorer.exe (GdipCloneMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAA02)
[Address] EAT @explorer.exe (GdipClonePath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA64E3)
[Address] EAT @explorer.exe (GdipClonePen) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0B1D)
[Address] EAT @explorer.exe (GdipCloneRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABE90)
[Address] EAT @explorer.exe (GdipCloneStringFormat) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3FF2)
[Address] EAT @explorer.exe (GdipClosePathFigure) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6DB4)
[Address] EAT @explorer.exe (GdipClosePathFigures) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6E57)
[Address] EAT @explorer.exe (GdipCombineRegionPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC2D9)
[Address] EAT @explorer.exe (GdipCombineRegionRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC185)
[Address] EAT @explorer.exe (GdipCombineRegionRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC25C)
[Address] EAT @explorer.exe (GdipCombineRegionRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC407)
[Address] EAT @explorer.exe (GdipComment) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC32C3)
[Address] EAT @explorer.exe (GdipConvertToEmfPlus) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4ED8)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4FB8)
[Address] EAT @explorer.exe (GdipConvertToEmfPlusToStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC50AC)
[Address] EAT @explorer.exe (GdipCreateAdjustableArrowCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6B37)
[Address] EAT @explorer.exe (GdipCreateBitmapFromDirectDrawSurface) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB64E1)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5E7E)
[Address] EAT @explorer.exe (GdipCreateBitmapFromFileICM) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB611A)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGdiDib) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB65CE)
[Address] EAT @explorer.exe (GdipCreateBitmapFromGraphics) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB638E)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHBITMAP) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB66D0)
[Address] EAT @explorer.exe (GdipCreateBitmapFromHICON) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB684E)
[Address] EAT @explorer.exe (GdipCreateBitmapFromResource) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB68E0)
[Address] EAT @explorer.exe (GdipCreateBitmapFromScan0) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6269)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5D31)
[Address] EAT @explorer.exe (GdipCreateBitmapFromStreamICM) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5FCC)
[Address] EAT @explorer.exe (GdipCreateCachedBitmap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4A4A)
[Address] EAT @explorer.exe (GdipCreateCustomLineCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2C94)
[Address] EAT @explorer.exe (GdipCreateEffect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6E32)
[Address] EAT @explorer.exe (GdipCreateFont) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2793)
[Address] EAT @explorer.exe (GdipCreateFontFamilyFromName) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2559)
[Address] EAT @explorer.exe (GdipCreateFontFromDC) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC369D)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontA) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3797)
[Address] EAT @explorer.exe (GdipCreateFontFromLogfontW) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC389A)
[Address] EAT @explorer.exe (GdipCreateFromHDC) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB82CA)
[Address] EAT @explorer.exe (GdipCreateFromHDC2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8374)
[Address] EAT @explorer.exe (GdipCreateFromHWND) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB841F)
[Address] EAT @explorer.exe (GdipCreateFromHWNDICM) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB84C9)
[Address] EAT @explorer.exe (GdipCreateHBITMAPFromBitmap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6765)
[Address] EAT @explorer.exe (GdipCreateHICONFromBitmap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6975)
[Address] EAT @explorer.exe (GdipCreateHalftonePalette) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4D55)
[Address] EAT @explorer.exe (GdipCreateHatchBrush) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC629C)
[Address] EAT @explorer.exe (GdipCreateImageAttributes) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB76A7)
[Address] EAT @explorer.exe (GdipCreateLineBrush) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE20A)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE3CF)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE4BF)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE587)
[Address] EAT @explorer.exe (GdipCreateLineBrushFromRectWithAngleI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE67E)
[Address] EAT @explorer.exe (GdipCreateLineBrushI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE300)
[Address] EAT @explorer.exe (GdipCreateMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA657)
[Address] EAT @explorer.exe (GdipCreateMatrix2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA70D)
[Address] EAT @explorer.exe (GdipCreateMatrix3) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA84D)
[Address] EAT @explorer.exe (GdipCreateMatrix3I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA915)
[Address] EAT @explorer.exe (GdipCreateMetafileFromEmf) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1505)
[Address] EAT @explorer.exe (GdipCreateMetafileFromFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC15DD)
[Address] EAT @explorer.exe (GdipCreateMetafileFromStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC178C)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmf) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1428)
[Address] EAT @explorer.exe (GdipCreateMetafileFromWmfFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC16B4)
[Address] EAT @explorer.exe (GdipCreatePath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC61AB)
[Address] EAT @explorer.exe (GdipCreatePath2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6247)
[Address] EAT @explorer.exe (GdipCreatePath2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6318)
[Address] EAT @explorer.exe (GdipCreatePathGradient) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6865)
[Address] EAT @explorer.exe (GdipCreatePathGradientFromPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6A79)
[Address] EAT @explorer.exe (GdipCreatePathGradientI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6927)
[Address] EAT @explorer.exe (GdipCreatePathIter) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9A80)
[Address] EAT @explorer.exe (GdipCreatePen1) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0899)
[Address] EAT @explorer.exe (GdipCreatePen2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB09CA)
[Address] EAT @explorer.exe (GdipCreateRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB997)
[Address] EAT @explorer.exe (GdipCreateRegionHrgn) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABDC1)
[Address] EAT @explorer.exe (GdipCreateRegionPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABBBD)
[Address] EAT @explorer.exe (GdipCreateRegionRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABA50)
[Address] EAT @explorer.exe (GdipCreateRegionRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABB12)
[Address] EAT @explorer.exe (GdipCreateRegionRgnData) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABCDF)
[Address] EAT @explorer.exe (GdipCreateSolidFill) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC7051)
[Address] EAT @explorer.exe (GdipCreateStreamOnFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA586D)
[Address] EAT @explorer.exe (GdipCreateStringFormat) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3E28)
[Address] EAT @explorer.exe (GdipCreateTexture) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC637D)
[Address] EAT @explorer.exe (GdipCreateTexture2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC649F)
[Address] EAT @explorer.exe (GdipCreateTexture2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC678B)
[Address] EAT @explorer.exe (GdipCreateTextureIA) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC65E1)
[Address] EAT @explorer.exe (GdipCreateTextureIAI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC682B)
[Address] EAT @explorer.exe (GdipDeleteBrush) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD921)
[Address] EAT @explorer.exe (GdipDeleteCachedBitmap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4BB5)
[Address] EAT @explorer.exe (GdipDeleteCustomLineCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3032)
[Address] EAT @explorer.exe (GdipDeleteEffect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6EC3)
[Address] EAT @explorer.exe (GdipDeleteFont) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC30CC)
[Address] EAT @explorer.exe (GdipDeleteFontFamily) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC28EB)
[Address] EAT @explorer.exe (GdipDeleteGraphics) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8573)
[Address] EAT @explorer.exe (GdipDeleteMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAAD7)
[Address] EAT @explorer.exe (GdipDeletePath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA65B7)
[Address] EAT @explorer.exe (GdipDeletePathIter) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9B39)
[Address] EAT @explorer.exe (GdipDeletePen) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0BF4)
[Address] EAT @explorer.exe (GdipDeletePrivateFontCollection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3AE4)
[Address] EAT @explorer.exe (GdipDeleteRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EABFAF)
[Address] EAT @explorer.exe (GdipDeleteStringFormat) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC409D)
[Address] EAT @explorer.exe (GdipDisposeImage) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4D27)
[Address] EAT @explorer.exe (GdipDisposeImageAttributes) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7848)
[Address] EAT @explorer.exe (GdipDrawArc) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA46E)
[Address] EAT @explorer.exe (GdipDrawArcI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA5A8)
[Address] EAT @explorer.exe (GdipDrawBezier) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA621)
[Address] EAT @explorer.exe (GdipDrawBezierI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA769)
[Address] EAT @explorer.exe (GdipDrawBeziers) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA7F0)
[Address] EAT @explorer.exe (GdipDrawBeziersI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA91A)
[Address] EAT @explorer.exe (GdipDrawCachedBitmap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4C4F)
[Address] EAT @explorer.exe (GdipDrawClosedCurve) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBBC42)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBBE85)
[Address] EAT @explorer.exe (GdipDrawClosedCurve2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBBFB6)
[Address] EAT @explorer.exe (GdipDrawClosedCurveI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBBD6C)
[Address] EAT @explorer.exe (GdipDrawCurve) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB54A)
[Address] EAT @explorer.exe (GdipDrawCurve2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB78D)
[Address] EAT @explorer.exe (GdipDrawCurve2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB8C5)
[Address] EAT @explorer.exe (GdipDrawCurve3) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB9E5)
[Address] EAT @explorer.exe (GdipDrawCurve3I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBBB1C)
[Address] EAT @explorer.exe (GdipDrawCurveI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB674)
[Address] EAT @explorer.exe (GdipDrawDriverString) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD9E3)
[Address] EAT @explorer.exe (GdipDrawEllipse) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBAE4B)
[Address] EAT @explorer.exe (GdipDrawEllipseI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBAF6F)
[Address] EAT @explorer.exe (GdipDrawImage) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBDEE7)
[Address] EAT @explorer.exe (GdipDrawImageFX) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBEB42)
[Address] EAT @explorer.exe (GdipDrawImageI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE062)
[Address] EAT @explorer.exe (GdipDrawImagePointRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE51C)
[Address] EAT @explorer.exe (GdipDrawImagePointRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE6B8)
[Address] EAT @explorer.exe (GdipDrawImagePoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE288)
[Address] EAT @explorer.exe (GdipDrawImagePointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE3E0)
[Address] EAT @explorer.exe (GdipDrawImagePointsRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE754)
[Address] EAT @explorer.exe (GdipDrawImagePointsRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE9B3)
[Address] EAT @explorer.exe (GdipDrawImageRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE0BE)
[Address] EAT @explorer.exe (GdipDrawImageRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBE21D)
[Address] EAT @explorer.exe (GdipDrawImageRectRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6C80)
[Address] EAT @explorer.exe (GdipDrawImageRectRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC6ED6)
[Address] EAT @explorer.exe (GdipDrawLine) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA09A)
[Address] EAT @explorer.exe (GdipDrawLineI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA1BE)
[Address] EAT @explorer.exe (GdipDrawLines) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA229)
[Address] EAT @explorer.exe (GdipDrawLinesI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBA355)
[Address] EAT @explorer.exe (GdipDrawPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB3D0)
[Address] EAT @explorer.exe (GdipDrawPie) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBAFDA)
[Address] EAT @explorer.exe (GdipDrawPieI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB114)
[Address] EAT @explorer.exe (GdipDrawPolygon) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB18D)
[Address] EAT @explorer.exe (GdipDrawPolygonI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBB2B7)
[Address] EAT @explorer.exe (GdipDrawRectangle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBAA56)
[Address] EAT @explorer.exe (GdipDrawRectangleI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBAB7A)
[Address] EAT @explorer.exe (GdipDrawRectangles) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBABE5)
[Address] EAT @explorer.exe (GdipDrawRectanglesI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBAD0F)
[Address] EAT @explorer.exe (GdipDrawString) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD4DB)
[Address] EAT @explorer.exe (GdipEmfToWmfBits) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4E82)
[Address] EAT @explorer.exe (GdipEndContainer) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1099)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBEC83)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBEE34)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF0C1)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestPointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF275)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBEE9C)
[Address] EAT @explorer.exe (GdipEnumerateMetafileDestRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF04D)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF3E0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF5C0)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF8BE)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestPointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBFAA1)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF649)
[Address] EAT @explorer.exe (GdipEnumerateMetafileSrcRectDestRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBF829)
[Address] EAT @explorer.exe (GdipFillClosedCurve) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBCEB5)
[Address] EAT @explorer.exe (GdipFillClosedCurve2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD107)
[Address] EAT @explorer.exe (GdipFillClosedCurve2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD23E)
[Address] EAT @explorer.exe (GdipFillClosedCurveI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBCFEE)
[Address] EAT @explorer.exe (GdipFillEllipse) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC9EC)
[Address] EAT @explorer.exe (GdipFillEllipseI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBCB17)
[Address] EAT @explorer.exe (GdipFillPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBCD38)
[Address] EAT @explorer.exe (GdipFillPie) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBCB82)
[Address] EAT @explorer.exe (GdipFillPieI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBCCBF)
[Address] EAT @explorer.exe (GdipFillPolygon) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC55A)
[Address] EAT @explorer.exe (GdipFillPolygon2) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC7A6)
[Address] EAT @explorer.exe (GdipFillPolygon2I) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC8D3)
[Address] EAT @explorer.exe (GdipFillPolygonI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC68A)

Pokračování logu z Rogue killer:

[Address] EAT @explorer.exe (GdipFillRectangle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC17E)
[Address] EAT @explorer.exe (GdipFillRectangleI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC2A9)
[Address] EAT @explorer.exe (GdipFillRectangles) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC314)
[Address] EAT @explorer.exe (GdipFillRectanglesI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC441)
[Address] EAT @explorer.exe (GdipFillRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD361)
[Address] EAT @explorer.exe (GdipFindFirstImageItem) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5A83)
[Address] EAT @explorer.exe (GdipFindNextImageItem) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5B29)
[Address] EAT @explorer.exe (GdipFlattenPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8C5C)
[Address] EAT @explorer.exe (GdipFlush) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB860E)
[Address] EAT @explorer.exe (GdipFree) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC250F)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapFillState) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3C6D)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapHeight) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3860)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapMiddleInset) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3B16)
[Address] EAT @explorer.exe (GdipGetAdjustableArrowCapWidth) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB39BB)
[Address] EAT @explorer.exe (GdipGetAllPropertyItems) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4A7C)
[Address] EAT @explorer.exe (GdipGetBrushType) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD9BE)
[Address] EAT @explorer.exe (GdipGetCellAscent) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC34BD)
[Address] EAT @explorer.exe (GdipGetCellDescent) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC355D)
[Address] EAT @explorer.exe (GdipGetClip) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0495)
[Address] EAT @explorer.exe (GdipGetClipBounds) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC058D)
[Address] EAT @explorer.exe (GdipGetClipBoundsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0640)
[Address] EAT @explorer.exe (GdipGetCompositingMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB88B8)
[Address] EAT @explorer.exe (GdipGetCompositingQuality) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8A08)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB344E)
[Address] EAT @explorer.exe (GdipGetCustomLineCapBaseInset) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB35A5)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeCaps) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3172)
[Address] EAT @explorer.exe (GdipGetCustomLineCapStrokeJoin) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB32EE)
[Address] EAT @explorer.exe (GdipGetCustomLineCapType) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2F7B)
[Address] EAT @explorer.exe (GdipGetCustomLineCapWidthScale) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB36FC)
[Address] EAT @explorer.exe (GdipGetDC) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3144)
[Address] EAT @explorer.exe (GdipGetDpiX) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9BAC)
[Address] EAT @explorer.exe (GdipGetDpiY) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9C5D)
[Address] EAT @explorer.exe (GdipGetEffectParameterSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6F97)
[Address] EAT @explorer.exe (GdipGetEffectParameters) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6FFC)
[Address] EAT @explorer.exe (GdipGetEmHeight) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC341D)
[Address] EAT @explorer.exe (GdipGetEncoderParameterList) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB410E)
[Address] EAT @explorer.exe (GdipGetEncoderParameterListSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB406D)
[Address] EAT @explorer.exe (GdipGetFamily) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2A84)
[Address] EAT @explorer.exe (GdipGetFamilyName) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBDE5A)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3B98)
[Address] EAT @explorer.exe (GdipGetFontCollectionFamilyList) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3C34)
[Address] EAT @explorer.exe (GdipGetFontHeight) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2E62)
[Address] EAT @explorer.exe (GdipGetFontHeightGivenDPI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2F6A)
[Address] EAT @explorer.exe (GdipGetFontSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2D26)
[Address] EAT @explorer.exe (GdipGetFontStyle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC424D)
[Address] EAT @explorer.exe (GdipGetFontUnit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2DC4)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilyMonospace) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC271A)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySansSerif) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2628)
[Address] EAT @explorer.exe (GdipGetGenericFontFamilySerif) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC26A1)
[Address] EAT @explorer.exe (GdipGetHatchBackgroundColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADBDD)
[Address] EAT @explorer.exe (GdipGetHatchForegroundColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADB27)
[Address] EAT @explorer.exe (GdipGetHatchStyle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADA71)
[Address] EAT @explorer.exe (GdipGetHemfFromMetafile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC136D)
[Address] EAT @explorer.exe (GdipGetImageAttributesAdjustedPalette) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB81E2)
[Address] EAT @explorer.exe (GdipGetImageBounds) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4F3C)
[Address] EAT @explorer.exe (GdipGetImageDecoders) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC20B5)
[Address] EAT @explorer.exe (GdipGetImageDecodersSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC202C)
[Address] EAT @explorer.exe (GdipGetImageDimension) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5011)
[Address] EAT @explorer.exe (GdipGetImageEncoders) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC22E9)
[Address] EAT @explorer.exe (GdipGetImageEncodersSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2260)
[Address] EAT @explorer.exe (GdipGetImageFlags) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5422)
[Address] EAT @explorer.exe (GdipGetImageGraphicsContext) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4E65)
[Address] EAT @explorer.exe (GdipGetImageHeight) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB51A3)
[Address] EAT @explorer.exe (GdipGetImageHorizontalResolution) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5278)
[Address] EAT @explorer.exe (GdipGetImageItemData) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5BCF)
[Address] EAT @explorer.exe (GdipGetImagePalette) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB56A5)
[Address] EAT @explorer.exe (GdipGetImagePaletteSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB582D)
[Address] EAT @explorer.exe (GdipGetImagePixelFormat) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB55D0)
[Address] EAT @explorer.exe (GdipGetImageRawFormat) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB54F7)
[Address] EAT @explorer.exe (GdipGetImageThumbnail) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB59AC)
[Address] EAT @explorer.exe (GdipGetImageType) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB58FC)
[Address] EAT @explorer.exe (GdipGetImageVerticalResolution) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB534D)
[Address] EAT @explorer.exe (GdipGetImageWidth) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB50CE)
[Address] EAT @explorer.exe (GdipGetInterpolationMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB915E)
[Address] EAT @explorer.exe (GdipGetLineBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAEA2F)
[Address] EAT @explorer.exe (GdipGetLineBlendCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE979)
[Address] EAT @explorer.exe (GdipGetLineColors) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE802)
[Address] EAT @explorer.exe (GdipGetLineGammaCorrection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA57E2)
[Address] EAT @explorer.exe (GdipGetLinePresetBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAEBBD)
[Address] EAT @explorer.exe (GdipGetLinePresetBlendCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAEB03)
[Address] EAT @explorer.exe (GdipGetLineRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFBC2)
[Address] EAT @explorer.exe (GdipGetLineRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE8C1)
[Address] EAT @explorer.exe (GdipGetLineSpacing) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC35FD)
[Address] EAT @explorer.exe (GdipGetLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADD9C)
[Address] EAT @explorer.exe (GdipGetLineWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0410)
[Address] EAT @explorer.exe (GdipGetLogFontA) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2B22)
[Address] EAT @explorer.exe (GdipGetLogFontW) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2C24)
[Address] EAT @explorer.exe (GdipGetMatrixElements) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB647)
[Address] EAT @explorer.exe (GdipGetMetafileDownLevelRasterizationLimit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1F14)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromEmf) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC11A2)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1205)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromMetafile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC12C9)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1266)
[Address] EAT @explorer.exe (GdipGetMetafileHeaderFromWmf) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1138)
[Address] EAT @explorer.exe (GdipGetNearestColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9FE3)
[Address] EAT @explorer.exe (GdipGetPageScale) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9A56)
[Address] EAT @explorer.exe (GdipGetPageUnit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB98E7)
[Address] EAT @explorer.exe (GdipGetPathData) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6C6D)
[Address] EAT @explorer.exe (GdipGetPathFillMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6B13)
[Address] EAT @explorer.exe (GdipGetPathGradientBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFDC7)
[Address] EAT @explorer.exe (GdipGetPathGradientBlendCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE979)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF346)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF7DF)
[Address] EAT @explorer.exe (GdipGetPathGradientCenterPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF899)
[Address] EAT @explorer.exe (GdipGetPathGradientFocusScales) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB070D)
[Address] EAT @explorer.exe (GdipGetPathGradientGammaCorrection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFD14)
[Address] EAT @explorer.exe (GdipGetPathGradientPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF79C)
[Address] EAT @explorer.exe (GdipGetPathGradientPointCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFA55)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFF6F)
[Address] EAT @explorer.exe (GdipGetPathGradientPresetBlendCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAEB03)
[Address] EAT @explorer.exe (GdipGetPathGradientRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFBC2)
[Address] EAT @explorer.exe (GdipGetPathGradientRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE8C1)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFB08)
[Address] EAT @explorer.exe (GdipGetPathGradientSurroundColorsWithCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF4B2)
[Address] EAT @explorer.exe (GdipGetPathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADD9C)
[Address] EAT @explorer.exe (GdipGetPathGradientWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0410)
[Address] EAT @explorer.exe (GdipGetPathLastPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA70E3)
[Address] EAT @explorer.exe (GdipGetPathPoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA68C3)
[Address] EAT @explorer.exe (GdipGetPathPointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA69CF)
[Address] EAT @explorer.exe (GdipGetPathTypes) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA67BA)
[Address] EAT @explorer.exe (GdipGetPathWorldBounds) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9278)
[Address] EAT @explorer.exe (GdipGetPathWorldBoundsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9444)
[Address] EAT @explorer.exe (GdipGetPenBrushFill) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB242B)
[Address] EAT @explorer.exe (GdipGetPenColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2260)
[Address] EAT @explorer.exe (GdipGetPenCompoundArray) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2BDA)
[Address] EAT @explorer.exe (GdipGetPenCompoundCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2A70)
[Address] EAT @explorer.exe (GdipGetPenCustomEndCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB181F)
[Address] EAT @explorer.exe (GdipGetPenCustomStartCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1660)
[Address] EAT @explorer.exe (GdipGetPenDashArray) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB29B6)
[Address] EAT @explorer.exe (GdipGetPenDashCap197819) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1353)
[Address] EAT @explorer.exe (GdipGetPenDashCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB284C)
[Address] EAT @explorer.exe (GdipGetPenDashOffset) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB26FE)
[Address] EAT @explorer.exe (GdipGetPenDashStyle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB25AD)
[Address] EAT @explorer.exe (GdipGetPenEndCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB12A3)
[Address] EAT @explorer.exe (GdipGetPenFillType) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB24F0)
[Address] EAT @explorer.exe (GdipGetPenLineJoin) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB14A8)
[Address] EAT @explorer.exe (GdipGetPenMiterLimit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB197B)
[Address] EAT @explorer.exe (GdipGetPenMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1ACE)
[Address] EAT @explorer.exe (GdipGetPenStartCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB11F3)
[Address] EAT @explorer.exe (GdipGetPenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1C84)
[Address] EAT @explorer.exe (GdipGetPenUnit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0EB9)
[Address] EAT @explorer.exe (GdipGetPenWidth) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0D4A)
[Address] EAT @explorer.exe (GdipGetPixelOffsetMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8D07)
[Address] EAT @explorer.exe (GdipGetPointCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6707)
[Address] EAT @explorer.exe (GdipGetPropertyCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4766)
[Address] EAT @explorer.exe (GdipGetPropertyIdList) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4801)
[Address] EAT @explorer.exe (GdipGetPropertyItem) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB493D)
[Address] EAT @explorer.exe (GdipGetPropertyItemSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB489F)
[Address] EAT @explorer.exe (GdipGetPropertySize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB49DE)
[Address] EAT @explorer.exe (GdipGetRegionBounds) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC71D)
[Address] EAT @explorer.exe (GdipGetRegionBoundsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC83F)
[Address] EAT @explorer.exe (GdipGetRegionData) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD02B)
[Address] EAT @explorer.exe (GdipGetRegionDataSize) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EACF52)
[Address] EAT @explorer.exe (GdipGetRegionHRgn) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC9BA)
[Address] EAT @explorer.exe (GdipGetRegionScans) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD5F5)
[Address] EAT @explorer.exe (GdipGetRegionScansCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD4CD)
[Address] EAT @explorer.exe (GdipGetRegionScansI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD71E)
[Address] EAT @explorer.exe (GdipGetRenderingOrigin) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8746)
[Address] EAT @explorer.exe (GdipGetSmoothingMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8B78)
[Address] EAT @explorer.exe (GdipGetSolidFillColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE154)
[Address] EAT @explorer.exe (GdipGetStringFormatAlign) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC424D)
[Address] EAT @explorer.exe (GdipGetStringFormatDigitSubstitution) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4878)
[Address] EAT @explorer.exe (GdipGetStringFormatFlags) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2A84)
[Address] EAT @explorer.exe (GdipGetStringFormatHotkeyPrefix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4432)
[Address] EAT @explorer.exe (GdipGetStringFormatLineAlign) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC2DC4)
[Address] EAT @explorer.exe (GdipGetStringFormatMeasurableCharacterRangeCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC46CD)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStopCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4580)
[Address] EAT @explorer.exe (GdipGetStringFormatTabStops) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4622)
[Address] EAT @explorer.exe (GdipGetStringFormatTrimming) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC49A8)
[Address] EAT @explorer.exe (GdipGetTextContrast) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8F18)
[Address] EAT @explorer.exe (GdipGetTextRenderingHint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8FC9)
[Address] EAT @explorer.exe (GdipGetTextureImage) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADF7E)
[Address] EAT @explorer.exe (GdipGetTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADD9C)
[Address] EAT @explorer.exe (GdipGetTextureWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0410)
[Address] EAT @explorer.exe (GdipGetVisibleClipBounds) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0800)
[Address] EAT @explorer.exe (GdipGetVisibleClipBoundsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC08B3)
[Address] EAT @explorer.exe (GdipGetWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB974B)
[Address] EAT @explorer.exe (GdipGraphicsClear) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBC0D6)
[Address] EAT @explorer.exe (GdipGraphicsSetAbort) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7559)
[Address] EAT @explorer.exe (GdipImageForceValidation) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB5C75)
[Address] EAT @explorer.exe (GdipImageGetFrameCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB457E)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB444B)
[Address] EAT @explorer.exe (GdipImageGetFrameDimensionsList) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB44E3)
[Address] EAT @explorer.exe (GdipImageRotateFlip) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB46CE)
[Address] EAT @explorer.exe (GdipImageSelectActiveFrame) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4619)
[Address] EAT @explorer.exe (GdipImageSetAbort) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB74B3)
[Address] EAT @explorer.exe (GdipInitializePalette) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7155)
[Address] EAT @explorer.exe (GdipInvertMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB0BD)
[Address] EAT @explorer.exe (GdipIsClipEmpty) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC074B)
[Address] EAT @explorer.exe (GdipIsEmptyRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EACAFE)
[Address] EAT @explorer.exe (GdipIsEqualRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EACD8E)
[Address] EAT @explorer.exe (GdipIsInfiniteRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EACC46)
[Address] EAT @explorer.exe (GdipIsMatrixEqual) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB862)
[Address] EAT @explorer.exe (GdipIsMatrixIdentity) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB7AF)

Pokračování logu Rogue Killer:
¨
[Address] EAT @explorer.exe (GdipIsMatrixInvertible) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB6FA)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA97F6)
[Address] EAT @explorer.exe (GdipIsOutlineVisiblePathPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9A1E)
[Address] EAT @explorer.exe (GdipIsStyleAvailable) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC337E)
[Address] EAT @explorer.exe (GdipIsVisibleClipEmpty) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC09BE)
[Address] EAT @explorer.exe (GdipIsVisiblePathPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9610)
[Address] EAT @explorer.exe (GdipIsVisiblePathPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9797)
[Address] EAT @explorer.exe (GdipIsVisiblePoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0A73)
[Address] EAT @explorer.exe (GdipIsVisiblePointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0B38)
[Address] EAT @explorer.exe (GdipIsVisibleRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0B94)
[Address] EAT @explorer.exe (GdipIsVisibleRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0C68)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD11E)
[Address] EAT @explorer.exe (GdipIsVisibleRegionPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD289)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD2E8)
[Address] EAT @explorer.exe (GdipIsVisibleRegionRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAD45F)
[Address] EAT @explorer.exe (GdipLoadImageFromFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3DF4)
[Address] EAT @explorer.exe (GdipLoadImageFromFileICM) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3F9A)
[Address] EAT @explorer.exe (GdipLoadImageFromStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3D21)
[Address] EAT @explorer.exe (GdipLoadImageFromStreamICM) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3EC7)
[Address] EAT @explorer.exe (GdipMeasureCharacterRanges) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD85F)
[Address] EAT @explorer.exe (GdipMeasureDriverString) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBDC56)
[Address] EAT @explorer.exe (GdipMeasureString) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBD6C4)
[Address] EAT @explorer.exe (GdipMultiplyLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF22D)
[Address] EAT @explorer.exe (GdipMultiplyMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAC46)
[Address] EAT @explorer.exe (GdipMultiplyPathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF22D)
[Address] EAT @explorer.exe (GdipMultiplyPenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1E2A)
[Address] EAT @explorer.exe (GdipMultiplyTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF22D)
[Address] EAT @explorer.exe (GdipMultiplyWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB939D)
[Address] EAT @explorer.exe (GdipNewInstalledFontCollection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC399D)
[Address] EAT @explorer.exe (GdipNewPrivateFontCollection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3A20)
[Address] EAT @explorer.exe (GdipPathIterCopyData) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA54F)
[Address] EAT @explorer.exe (GdipPathIterEnumerate) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA44A)
[Address] EAT @explorer.exe (GdipPathIterGetCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA0B3)
[Address] EAT @explorer.exe (GdipPathIterGetSubpathCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA170)
[Address] EAT @explorer.exe (GdipPathIterHasCurve) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA2EA)
[Address] EAT @explorer.exe (GdipPathIterIsValid) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA22D)
[Address] EAT @explorer.exe (GdipPathIterNextMarker) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9EF4)
[Address] EAT @explorer.exe (GdipPathIterNextMarkerPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9FF3)
[Address] EAT @explorer.exe (GdipPathIterNextPathType) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9DD6)
[Address] EAT @explorer.exe (GdipPathIterNextSubpath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9BD3)
[Address] EAT @explorer.exe (GdipPathIterNextSubpathPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9CF1)
[Address] EAT @explorer.exe (GdipPathIterRewind) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAA39B)
[Address] EAT @explorer.exe (GdipPlayMetafileRecord) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBFC3F)
[Address] EAT @explorer.exe (GdipPlayTSClientRecord) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC51A0)
[Address] EAT @explorer.exe (GdipPrivateAddFontFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3CE9)
[Address] EAT @explorer.exe (GdipPrivateAddMemoryFont) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3D87)
[Address] EAT @explorer.exe (GdipRecordMetafile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1861)
[Address] EAT @explorer.exe (GdipRecordMetafileFileName) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1A36)
[Address] EAT @explorer.exe (GdipRecordMetafileFileNameI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1B6E)
[Address] EAT @explorer.exe (GdipRecordMetafileI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1980)
[Address] EAT @explorer.exe (GdipRecordMetafileStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1C27)
[Address] EAT @explorer.exe (GdipRecordMetafileStreamI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1D5F)
[Address] EAT @explorer.exe (GdipReleaseDC) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC320B)
[Address] EAT @explorer.exe (GdipRemovePropertyItem) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4B1D)
[Address] EAT @explorer.exe (GdipResetClip) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC02F1)
[Address] EAT @explorer.exe (GdipResetImageAttributes) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB799E)
[Address] EAT @explorer.exe (GdipResetLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF18A)
[Address] EAT @explorer.exe (GdipResetPageTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9841)
[Address] EAT @explorer.exe (GdipResetPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6664)
[Address] EAT @explorer.exe (GdipResetPathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF18A)
[Address] EAT @explorer.exe (GdipResetPenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1D8A)
[Address] EAT @explorer.exe (GdipResetTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF18A)
[Address] EAT @explorer.exe (GdipResetWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB92FF)
[Address] EAT @explorer.exe (GdipRestoreGraphics) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0D88)
[Address] EAT @explorer.exe (GdipReversePath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA7040)
[Address] EAT @explorer.exe (GdipRotateLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0640)
[Address] EAT @explorer.exe (GdipRotateMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAF25)
[Address] EAT @explorer.exe (GdipRotatePathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0640)
[Address] EAT @explorer.exe (GdipRotatePenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB20EC)
[Address] EAT @explorer.exe (GdipRotateTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0640)
[Address] EAT @explorer.exe (GdipRotateWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9683)
[Address] EAT @explorer.exe (GdipSaveAdd) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4306)
[Address] EAT @explorer.exe (GdipSaveAddImage) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB43A4)
[Address] EAT @explorer.exe (GdipSaveGraphics) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0CD3)
[Address] EAT @explorer.exe (GdipSaveImageToFile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB425C)
[Address] EAT @explorer.exe (GdipSaveImageToStream) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB41B2)
[Address] EAT @explorer.exe (GdipScaleLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0567)
[Address] EAT @explorer.exe (GdipScaleMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAE53)
[Address] EAT @explorer.exe (GdipScalePathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0567)
[Address] EAT @explorer.exe (GdipScalePenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2016)
[Address] EAT @explorer.exe (GdipScaleTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0567)
[Address] EAT @explorer.exe (GdipScaleWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB95AF)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapFillState) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3BCA)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapHeight) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB37B9)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapMiddleInset) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3A6F)
[Address] EAT @explorer.exe (GdipSetAdjustableArrowCapWidth) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3914)
[Address] EAT @explorer.exe (GdipSetClipGraphics) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBFD2D)
[Address] EAT @explorer.exe (GdipSetClipHrgn) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC0204)
[Address] EAT @explorer.exe (GdipSetClipPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBFFA3)
[Address] EAT @explorer.exe (GdipSetClipRect) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBFE59)
[Address] EAT @explorer.exe (GdipSetClipRectI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EBFF38)
[Address] EAT @explorer.exe (GdipSetClipRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC00D6)
[Address] EAT @explorer.exe (GdipSetCompositingMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8819)
[Address] EAT @explorer.exe (GdipSetCompositingQuality) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8969)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB33AB)
[Address] EAT @explorer.exe (GdipSetCustomLineCapBaseInset) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB350B)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeCaps) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB30CC)
[Address] EAT @explorer.exe (GdipSetCustomLineCapStrokeJoin) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3254)
[Address] EAT @explorer.exe (GdipSetCustomLineCapWidthScale) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB3662)
[Address] EAT @explorer.exe (GdipSetEffectParameters) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB6F2E)
[Address] EAT @explorer.exe (GdipSetEmpty) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC0E7)
[Address] EAT @explorer.exe (GdipSetImageAttributesCachedBackground) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8096)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorKeys) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7D72)
[Address] EAT @explorer.exe (GdipSetImageAttributesColorMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7A5B)
[Address] EAT @explorer.exe (GdipSetImageAttributesGamma) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7BEB)
[Address] EAT @explorer.exe (GdipSetImageAttributesNoOp) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7CB2)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannel) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7E4A)
[Address] EAT @explorer.exe (GdipSetImageAttributesOutputChannelColorProfile) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7F0D)
[Address] EAT @explorer.exe (GdipSetImageAttributesRemapTable) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7FD0)
[Address] EAT @explorer.exe (GdipSetImageAttributesThreshold) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB7B24)
[Address] EAT @explorer.exe (GdipSetImageAttributesToIdentity) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB78E1)
[Address] EAT @explorer.exe (GdipSetImageAttributesWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8139)
[Address] EAT @explorer.exe (GdipSetImagePalette) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB575F)
[Address] EAT @explorer.exe (GdipSetInfinite) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC049)
[Address] EAT @explorer.exe (GdipSetInterpolationMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB907A)
[Address] EAT @explorer.exe (GdipSetLineBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFE9B)
[Address] EAT @explorer.exe (GdipSetLineColors) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE74D)
[Address] EAT @explorer.exe (GdipSetLineGammaCorrection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA5789)
[Address] EAT @explorer.exe (GdipSetLineLinearBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF026)
[Address] EAT @explorer.exe (GdipSetLinePresetBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAEDD2)
[Address] EAT @explorer.exe (GdipSetLineSigmaBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB035E)
[Address] EAT @explorer.exe (GdipSetLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADC93)
[Address] EAT @explorer.exe (GdipSetLineWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF0D8)
[Address] EAT @explorer.exe (GdipSetMatrixElements) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAB82)
[Address] EAT @explorer.exe (GdipSetMetafileDownLevelRasterizationLimit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC1E18)
[Address] EAT @explorer.exe (GdipSetPageScale) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9B07)
[Address] EAT @explorer.exe (GdipSetPageUnit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9998)
[Address] EAT @explorer.exe (GdipSetPathFillMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6BC9)
[Address] EAT @explorer.exe (GdipSetPathGradientBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFE9B)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF40E)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPoint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF92D)
[Address] EAT @explorer.exe (GdipSetPathGradientCenterPointI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF9E7)
[Address] EAT @explorer.exe (GdipSetPathGradientFocusScales) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB07F2)
[Address] EAT @explorer.exe (GdipSetPathGradientGammaCorrection) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAFC77)
[Address] EAT @explorer.exe (GdipSetPathGradientLinearBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF026)
[Address] EAT @explorer.exe (GdipSetPathGradientPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF79C)
[Address] EAT @explorer.exe (GdipSetPathGradientPresetBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB011B)
[Address] EAT @explorer.exe (GdipSetPathGradientSigmaBlend) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB035E)
[Address] EAT @explorer.exe (GdipSetPathGradientSurroundColorsWithCount) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAF5E0)
[Address] EAT @explorer.exe (GdipSetPathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADC93)
[Address] EAT @explorer.exe (GdipSetPathGradientWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB04C3)
[Address] EAT @explorer.exe (GdipSetPathMarker) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6EFA)
[Address] EAT @explorer.exe (GdipSetPenBrushFill) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2320)
[Address] EAT @explorer.exe (GdipSetPenColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB21B6)
[Address] EAT @explorer.exe (GdipSetPenCompoundArray) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB2B20)
[Address] EAT @explorer.exe (GdipSetPenCustomEndCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1717)
[Address] EAT @explorer.exe (GdipSetPenCustomStartCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1558)
[Address] EAT @explorer.exe (GdipSetPenDashArray) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB28FC)
[Address] EAT @explorer.exe (GdipSetPenDashCap197819) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1152)
[Address] EAT @explorer.exe (GdipSetPenDashOffset) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB27AE)
[Address] EAT @explorer.exe (GdipSetPenDashStyle) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB265D)
[Address] EAT @explorer.exe (GdipSetPenEndCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB10B1)
[Address] EAT @explorer.exe (GdipSetPenLineCap197819) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0F69)
[Address] EAT @explorer.exe (GdipSetPenLineJoin) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB140A)
[Address] EAT @explorer.exe (GdipSetPenMiterLimit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB18D6)
[Address] EAT @explorer.exe (GdipSetPenMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1A2B)
[Address] EAT @explorer.exe (GdipSetPenStartCap) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1010)
[Address] EAT @explorer.exe (GdipSetPenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1B7E)
[Address] EAT @explorer.exe (GdipSetPenUnit) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0DFA)
[Address] EAT @explorer.exe (GdipSetPenWidth) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB0CAC)
[Address] EAT @explorer.exe (GdipSetPixelOffsetMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8C4E)
[Address] EAT @explorer.exe (GdipSetPropertyItem) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB4BB8)
[Address] EAT @explorer.exe (GdipSetRenderingOrigin) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB86A4)
[Address] EAT @explorer.exe (GdipSetSmoothingMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8AB9)
[Address] EAT @explorer.exe (GdipSetSolidFillColor) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAE0B1)
[Address] EAT @explorer.exe (GdipSetStringFormatAlign) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC41A7)
[Address] EAT @explorer.exe (GdipSetStringFormatDigitSubstitution) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC47E7)
[Address] EAT @explorer.exe (GdipSetStringFormatFlags) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC411B)
[Address] EAT @explorer.exe (GdipSetStringFormatHotkeyPrefix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4391)
[Address] EAT @explorer.exe (GdipSetStringFormatLineAlign) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC42EB)
[Address] EAT @explorer.exe (GdipSetStringFormatMeasurableCharacterRanges) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC474F)
[Address] EAT @explorer.exe (GdipSetStringFormatTabStops) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC44D4)
[Address] EAT @explorer.exe (GdipSetStringFormatTrimming) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4909)
[Address] EAT @explorer.exe (GdipSetTextContrast) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8E77)
[Address] EAT @explorer.exe (GdipSetTextRenderingHint) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB8DB8)
[Address] EAT @explorer.exe (GdipSetTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADC93)
[Address] EAT @explorer.exe (GdipSetTextureWrapMode) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB04C3)
[Address] EAT @explorer.exe (GdipSetWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB91FB)
[Address] EAT @explorer.exe (GdipShearMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAFEB)
[Address] EAT @explorer.exe (GdipStartPathFigure) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6D13)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericDefault) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3EF8)
[Address] EAT @explorer.exe (GdipStringFormatGetGenericTypographic) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC3F7B)
[Address] EAT @explorer.exe (GdipTestControl) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC4E0B)
[Address] EAT @explorer.exe (GdipTransformMatrixPoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB15B)
[Address] EAT @explorer.exe (GdipTransformMatrixPointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB214)
[Address] EAT @explorer.exe (GdipTransformPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9171)
[Address] EAT @explorer.exe (GdipTransformPoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9D0E)
[Address] EAT @explorer.exe (GdipTransformPointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB9DCF)
[Address] EAT @explorer.exe (GdipTransformRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC617)
[Address] EAT @explorer.exe (GdipTranslateClip) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC038F)
[Address] EAT @explorer.exe (GdipTranslateClipI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EC043C)
[Address] EAT @explorer.exe (GdipTranslateLineTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADEA5)
[Address] EAT @explorer.exe (GdipTranslateMatrix) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAAD81)
[Address] EAT @explorer.exe (GdipTranslatePathGradientTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADEA5)
[Address] EAT @explorer.exe (GdipTranslatePenTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB1F40)
[Address] EAT @explorer.exe (GdipTranslateRegion) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC537)
[Address] EAT @explorer.exe (GdipTranslateRegionI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAC5BE)
[Address] EAT @explorer.exe (GdipTranslateTextureTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EADEA5)
[Address] EAT @explorer.exe (GdipTranslateWorldTransform) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EB94DB)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPoints) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB38A)
[Address] EAT @explorer.exe (GdipVectorTransformMatrixPointsI) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EAB443)
[Address] EAT @explorer.exe (GdipWarpPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA9011)
[Address] EAT @explorer.exe (GdipWidenPath) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8E8E)
[Address] EAT @explorer.exe (GdipWindingModeOutline) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA8D74)
[Address] EAT @explorer.exe (GdiplusNotificationHook) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA6152)
[Address] EAT @explorer.exe (GdiplusNotificationUnhook) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA61CE)
[Address] EAT @explorer.exe (GdiplusShutdown) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA56E2)
[Address] EAT @explorer.exe (GdiplusStartup) : comctl32.dll -> HOOKED (C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7600.16385_none_72fc7cbf861225ca\gdiplus.dll @ 0x73EA5624)
[Address] EAT @explorer.exe (BeginBufferedAnimation) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B09AE)
[Address] EAT @explorer.exe (BeginBufferedPaint) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A49A1)
[Address] EAT @explorer.exe (BeginPanningFeedback) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D0731)
[Address] EAT @explorer.exe (BufferedPaintClear) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A6395)
[Address] EAT @explorer.exe (BufferedPaintInit) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A940E)
[Address] EAT @explorer.exe (BufferedPaintRenderAnimation) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B08ED)
[Address] EAT @explorer.exe (BufferedPaintSetAlpha) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744BE6B3)
[Address] EAT @explorer.exe (BufferedPaintStopAllAnimations) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744BD395)
[Address] EAT @explorer.exe (BufferedPaintUnInit) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A94AB)
[Address] EAT @explorer.exe (CloseThemeData) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A6A18)
[Address] EAT @explorer.exe (DrawThemeBackground) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A3982)
[Address] EAT @explorer.exe (DrawThemeBackgroundEx) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744BD9DA)
[Address] EAT @explorer.exe (DrawThemeEdge) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744C3B52)
[Address] EAT @explorer.exe (DrawThemeIcon) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D35E7)
[Address] EAT @explorer.exe (DrawThemeParentBackground) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A53E5)
[Address] EAT @explorer.exe (DrawThemeParentBackgroundEx) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A51BF)
[Address] EAT @explorer.exe (DrawThemeText) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A4EA1)
[Address] EAT @explorer.exe (DrawThemeTextEx) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A63E6)
[Address] EAT @explorer.exe (EnableThemeDialogTexture) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AFCAF)
[Address] EAT @explorer.exe (EnableTheming) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2FEB)
[Address] EAT @explorer.exe (EndBufferedAnimation) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A3F9A)
[Address] EAT @explorer.exe (EndBufferedPaint) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A3F9A)
[Address] EAT @explorer.exe (EndPanningFeedback) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D06CC)
[Address] EAT @explorer.exe (GetBufferedPaintBits) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A4BAF)
[Address] EAT @explorer.exe (GetBufferedPaintDC) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B04BC)
[Address] EAT @explorer.exe (GetBufferedPaintTargetDC) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B0473)
[Address] EAT @explorer.exe (GetBufferedPaintTargetRect) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2E7F)
[Address] EAT @explorer.exe (GetCurrentThemeName) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B05DD)
[Address] EAT @explorer.exe (GetThemeAppProperties) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B0FB1)
[Address] EAT @explorer.exe (GetThemeBackgroundContentRect) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744ACD2E)
[Address] EAT @explorer.exe (GetThemeBackgroundExtent) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AF8BF)
[Address] EAT @explorer.exe (GetThemeBackgroundRegion) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B165D)
[Address] EAT @explorer.exe (GetThemeBitmap) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744ABF93)
[Address] EAT @explorer.exe (GetThemeBool) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A7C1F)
[Address] EAT @explorer.exe (GetThemeColor) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A616C)
[Address] EAT @explorer.exe (GetThemeDocumentationProperty) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2932)
[Address] EAT @explorer.exe (GetThemeEnumValue) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A616C)
[Address] EAT @explorer.exe (GetThemeFilename) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2412)
[Address] EAT @explorer.exe (GetThemeFont) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AFF21)
[Address] EAT @explorer.exe (GetThemeInt) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A616C)
[Address] EAT @explorer.exe (GetThemeIntList) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D23B1)
[Address] EAT @explorer.exe (GetThemeMargins) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A86E9)
[Address] EAT @explorer.exe (GetThemeMetric) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B06E2)
[Address] EAT @explorer.exe (GetThemePartSize) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744ACDB1)
[Address] EAT @explorer.exe (GetThemePosition) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2350)
[Address] EAT @explorer.exe (GetThemePropertyOrigin) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744C3FBB)
[Address] EAT @explorer.exe (GetThemeRect) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B3611)
[Address] EAT @explorer.exe (GetThemeStream) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B39D9)
[Address] EAT @explorer.exe (GetThemeString) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D22E4)
[Address] EAT @explorer.exe (GetThemeSysBool) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D3172)
[Address] EAT @explorer.exe (GetThemeSysColor) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744C3274)
[Address] EAT @explorer.exe (GetThemeSysColorBrush) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D301E)
[Address] EAT @explorer.exe (GetThemeSysFont) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D29C4)
[Address] EAT @explorer.exe (GetThemeSysInt) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2BD3)
[Address] EAT @explorer.exe (GetThemeSysSize) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D320B)
[Address] EAT @explorer.exe (GetThemeSysString) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D2B3F)
[Address] EAT @explorer.exe (GetThemeTextExtent) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A2D57)
[Address] EAT @explorer.exe (GetThemeTextMetrics) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AF992)
[Address] EAT @explorer.exe (GetThemeTransitionDuration) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B1081)
[Address] EAT @explorer.exe (GetWindowTheme) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744ADF46)
[Address] EAT @explorer.exe (HitTestThemeBackground) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B3CE3)
[Address] EAT @explorer.exe (IsAppThemed) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AF869)
[Address] EAT @explorer.exe (IsCompositionActive) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A2E9A)
[Address] EAT @explorer.exe (IsThemeActive) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AF785)
[Address] EAT @explorer.exe (IsThemeBackgroundPartiallyTransparent) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A60AB)
[Address] EAT @explorer.exe (IsThemeDialogTextureEnabled) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D312B)
[Address] EAT @explorer.exe (IsThemePartDefined) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A85B4)
[Address] EAT @explorer.exe (OpenThemeData) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744A73D2)
[Address] EAT @explorer.exe (OpenThemeDataEx) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744C3D43)
[Address] EAT @explorer.exe (SetThemeAppProperties) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D3296)
[Address] EAT @explorer.exe (SetWindowTheme) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744B0134)
[Address] EAT @explorer.exe (SetWindowThemeAttribute) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744BCFE6)
[Address] EAT @explorer.exe (ThemeInitApiHook) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744AB176)
[Address] EAT @explorer.exe (UpdatePanningFeedback) : SAMLIB.dll -> HOOKED (C:\Windows\system32\UxTheme.dll @ 0x744D068D)

¤¤¤ Externí včelstvo: ¤¤¤

¤¤¤ Nákaza : ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts




¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) SAMSUNG HD322HJ ATA Device +++++
--- User ---
[MBR] 8f03824adc3ffdf90b35219742383d45
[BSP] 30bb87029c9ec59b159287e28537e053 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 99998 MB
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 204797952 | Size: 205244 MB
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: (\\.\PHYSICALDRIVE1 @ USB) Generic USB SD Reader USB Device +++++
Error reading User MBR! ([0x15] Za?ízení není p?ipraveno. )
User = LL1 ... OK!
Error reading LL2 MBR! ([0x32] Po?adavek není podporován. )

Dokončeno : << RKreport[0]_D_04112014_143611.txt >>
RKreport[0]_S_04102014_205253.txt;RKreport[0]_S_04112014_143602.txt

Log z TDSSKiller:

14:38:52.0965 3300 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
14:38:58.0986 3300 ============================================================
14:38:58.0986 3300 Current date / time: 2014/04/11 14:38:58.0986
14:38:58.0986 3300 SystemInfo:
14:38:58.0986 3300
14:38:58.0986 3300 OS Version: 6.1.7600 ServicePack: 0.0
14:38:58.0986 3300 Product type: Workstation
14:38:58.0986 3300 ComputerName: STROJ
14:38:58.0986 3300 UserName: Tomáš
14:38:58.0986 3300 Windows directory: C:\Windows
14:38:58.0986 3300 System windows directory: C:\Windows
14:38:58.0986 3300 Processor architecture: Intel x86
14:38:58.0986 3300 Number of processors: 2
14:38:58.0986 3300 Page size: 0x1000
14:38:58.0986 3300 Boot type: Normal boot
14:38:58.0986 3300 ============================================================
14:39:00.0156 3300 Drive \Device\Harddisk0\DR0 - Size: 0x4A85D56000 (298.09 Gb), SectorSize: 0x200, Cylinders: 0x9801, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
14:39:00.0172 3300 ============================================================
14:39:00.0172 3300 \Device\Harddisk0\DR0:
14:39:00.0172 3300 MBR partitions:
14:39:00.0172 3300 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0xC34F28D
14:39:00.0172 3300 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0xC34F800, BlocksNum 0x190DE000
14:39:00.0172 3300 ============================================================
14:39:00.0172 3300 C: <-> \Device\Harddisk0\DR0\Partition1
14:39:00.0219 3300 D: <-> \Device\Harddisk0\DR0\Partition2
14:39:00.0219 3300 ============================================================
14:39:00.0219 3300 Initialize success
14:39:00.0219 3300 ============================================================
14:39:02.0668 2376 ============================================================
14:39:02.0668 2376 Scan started
14:39:02.0668 2376 Mode: Manual;
14:39:02.0668 2376 ============================================================
14:39:03.0370 2376 ================ Scan system memory ========================
14:39:03.0370 2376 System memory - ok
14:39:03.0370 2376 ================ Scan services =============================
14:39:03.0510 2376 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
14:39:03.0510 2376 1394ohci - ok
14:39:03.0542 2376 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
14:39:03.0542 2376 ACPI - ok
14:39:03.0573 2376 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
14:39:03.0573 2376 AcpiPmi - ok
14:39:03.0635 2376 [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
14:39:03.0635 2376 AdobeARMservice - ok
14:39:03.0666 2376 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
14:39:03.0666 2376 adp94xx - ok
14:39:03.0682 2376 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
14:39:03.0682 2376 adpahci - ok
14:39:03.0698 2376 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
14:39:03.0698 2376 adpu320 - ok
14:39:03.0729 2376 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
14:39:03.0744 2376 AeLookupSvc - ok
14:39:03.0760 2376 [ DDC040FDB01EF1712A6B13E52AFB104C ] AFD C:\Windows\system32\drivers\afd.sys
14:39:03.0760 2376 AFD - ok
14:39:03.0776 2376 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
14:39:03.0776 2376 agp440 - ok
14:39:03.0807 2376 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
14:39:03.0807 2376 aic78xx - ok
14:39:03.0838 2376 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
14:39:03.0838 2376 ALG - ok
14:39:03.0854 2376 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
14:39:03.0854 2376 aliide - ok
14:39:03.0869 2376 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
14:39:03.0869 2376 amdagp - ok
14:39:03.0869 2376 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
14:39:03.0869 2376 amdide - ok
14:39:03.0885 2376 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
14:39:03.0885 2376 AmdK8 - ok
14:39:03.0900 2376 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
14:39:03.0900 2376 AmdPPM - ok
14:39:03.0916 2376 [ 2101A86C25C154F8314B24EF49D7FBC2 ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
14:39:03.0916 2376 amdsata - ok
14:39:03.0932 2376 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
14:39:03.0932 2376 amdsbs - ok
14:39:03.0947 2376 [ B81C2B5616F6420A9941EA093A92B150 ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
14:39:03.0947 2376 amdxata - ok
14:39:03.0963 2376 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
14:39:03.0963 2376 AppID - ok
14:39:03.0978 2376 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
14:39:03.0978 2376 AppIDSvc - ok
14:39:03.0978 2376 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
14:39:03.0978 2376 Appinfo - ok
14:39:04.0010 2376 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
14:39:04.0010 2376 AppMgmt - ok
14:39:04.0025 2376 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
14:39:04.0025 2376 arc - ok
14:39:04.0041 2376 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
14:39:04.0056 2376 arcsas - ok
14:39:04.0119 2376 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:39:04.0134 2376 aspnet_state - ok
14:39:04.0166 2376 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
14:39:04.0166 2376 AsyncMac - ok
14:39:04.0181 2376 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
14:39:04.0181 2376 atapi - ok
14:39:04.0212 2376 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:39:04.0212 2376 AudioEndpointBuilder - ok
14:39:04.0228 2376 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
14:39:04.0244 2376 Audiosrv - ok
14:39:04.0259 2376 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
14:39:04.0259 2376 AxInstSV - ok
14:39:04.0290 2376 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
14:39:04.0290 2376 b06bdrv - ok
14:39:04.0322 2376 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
14:39:04.0322 2376 b57nd60x - ok
14:39:04.0337 2376 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
14:39:04.0337 2376 BDESVC - ok
14:39:04.0353 2376 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
14:39:04.0353 2376 Beep - ok
14:39:04.0384 2376 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
14:39:04.0400 2376 BFE - ok
14:39:04.0415 2376 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
14:39:04.0431 2376 BITS - ok
14:39:04.0446 2376 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
14:39:04.0446 2376 blbdrive - ok
14:39:04.0462 2376 [ FCAFAEF6798D7B51FF029F99A9898961 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
14:39:04.0462 2376 bowser - ok
14:39:04.0478 2376 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:39:04.0478 2376 BrFiltLo - ok
14:39:04.0493 2376 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:39:04.0493 2376 BrFiltUp - ok
14:39:04.0509 2376 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
14:39:04.0509 2376 Browser - ok
14:39:04.0540 2376 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
14:39:04.0540 2376 Brserid - ok
14:39:04.0556 2376 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
14:39:04.0556 2376 BrSerWdm - ok
14:39:04.0571 2376 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
14:39:04.0571 2376 BrUsbMdm - ok
14:39:04.0571 2376 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
14:39:04.0571 2376 BrUsbSer - ok
14:39:04.0602 2376 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
14:39:04.0602 2376 BTHMODEM - ok
14:39:04.0618 2376 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
14:39:04.0618 2376 bthserv - ok
14:39:04.0634 2376 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
14:39:04.0634 2376 cdfs - ok
14:39:04.0665 2376 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
14:39:04.0665 2376 cdrom - ok
14:39:04.0696 2376 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
14:39:04.0696 2376 CertPropSvc - ok
14:39:04.0774 2376 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
14:39:04.0774 2376 circlass - ok
14:39:04.0821 2376 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
14:39:04.0821 2376 CLFS - ok
14:39:04.0868 2376 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:39:04.0883 2376 clr_optimization_v2.0.50727_32 - ok
14:39:04.0899 2376 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:39:04.0914 2376 clr_optimization_v4.0.30319_32 - ok
14:39:04.0930 2376 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
14:39:04.0930 2376 CmBatt - ok
14:39:04.0946 2376 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
14:39:04.0946 2376 cmdide - ok
14:39:04.0961 2376 [ 1B675691ED940766149C93E8F4488D68 ] CNG C:\Windows\system32\Drivers\cng.sys
14:39:04.0961 2376 CNG - ok
14:39:04.0977 2376 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
14:39:04.0977 2376 Compbatt - ok
14:39:04.0992 2376 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
14:39:04.0992 2376 CompositeBus - ok
14:39:04.0992 2376 COMSysApp - ok
14:39:05.0008 2376 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
14:39:05.0008 2376 crcdisk - ok
14:39:05.0055 2376 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
14:39:05.0055 2376 CryptSvc - ok
14:39:05.0086 2376 [ 27C9490BDD0AE48911AB8CF1932591ED ] CSC C:\Windows\system32\drivers\csc.sys
14:39:05.0086 2376 CSC - ok
14:39:05.0102 2376 [ 56FB5F222EA30D3D3FC459879772CB73 ] CscService C:\Windows\System32\cscsvc.dll
14:39:05.0102 2376 CscService - ok
14:39:05.0133 2376 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
14:39:05.0133 2376 DcomLaunch - ok
14:39:05.0164 2376 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
14:39:05.0180 2376 defragsvc - ok
14:39:05.0195 2376 [ 8E09E52EE2E3CEB199EF3DD99CF9E3FB ] DfsC C:\Windows\system32\Drivers\dfsc.sys
14:39:05.0195 2376 DfsC - ok
14:39:05.0211 2376 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
14:39:05.0211 2376 Dhcp - ok
14:39:05.0226 2376 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
14:39:05.0226 2376 discache - ok
14:39:05.0242 2376 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
14:39:05.0242 2376 Disk - ok
14:39:05.0273 2376 [ D0722E963D3C6145446874241401B209 ] Dnscache C:\Windows\System32\dnsrslvr.dll
14:39:05.0273 2376 Dnscache - ok
14:39:05.0289 2376 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
14:39:05.0289 2376 dot3svc - ok
14:39:05.0320 2376 [ B5E479EB83707DD698F66953E922042C ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
14:39:05.0320 2376 Dot4 - ok
14:39:05.0351 2376 [ C25FEA07A8E7767E8B89AB96A3B96519 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
14:39:05.0351 2376 Dot4Print - ok
14:39:05.0367 2376 [ CF491FF38D62143203C065260567E2F7 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
14:39:05.0367 2376 dot4usb - ok
14:39:05.0382 2376 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
14:39:05.0382 2376 DPS - ok
14:39:05.0398 2376 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
14:39:05.0398 2376 drmkaud - ok
14:39:05.0429 2376 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
14:39:05.0429 2376 dtsoftbus01 - ok
14:39:05.0445 2376 [ 39806CFEDDCC55E686A49BCCD2972F23 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
14:39:05.0460 2376 DXGKrnl - ok
14:39:05.0476 2376 [ 04238864710460C5682E260207D06192 ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
14:39:05.0476 2376 eamonm - ok
14:39:05.0507 2376 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
14:39:05.0507 2376 EapHost - ok
14:39:05.0585 2376 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
14:39:05.0616 2376 ebdrv - ok
14:39:05.0648 2376 [ F42309C4191C506B71DB5D1126D26318 ] EFS C:\Windows\System32\lsass.exe
14:39:05.0648 2376 EFS - ok
14:39:05.0679 2376 [ DEFF87F04AB5F6DD5EDF2B80853BBE10 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
14:39:05.0679 2376 ehdrv - ok
14:39:05.0741 2376 [ 3A74A6E33685662B125A3269B1F2114F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
14:39:05.0741 2376 ehRecvr - ok
14:39:05.0757 2376 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
14:39:05.0757 2376 ehSched - ok
14:39:05.0804 2376 [ F0EEBAC2F362AA866188A1C0EF819CB9 ] ekrn C:\Program Files\ESET\ESET Smart Security\ekrn.exe
14:39:05.0804 2376 ekrn - ok
14:39:05.0835 2376 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
14:39:05.0835 2376 elxstor - ok
14:39:05.0866 2376 [ 5BA193CA0AE31209AAA39939CE6736B2 ] epfw C:\Windows\system32\DRIVERS\epfw.sys
14:39:05.0866 2376 epfw - ok
14:39:05.0882 2376 [ 9CEFD59C8E5EBFB48165AEF54617F539 ] EpfwLWF C:\Windows\system32\DRIVERS\EpfwLWF.sys
14:39:05.0882 2376 EpfwLWF - ok
14:39:05.0913 2376 [ 7144A06AC105A2A7302944602E415EC1 ] epfwwfp C:\Windows\system32\DRIVERS\epfwwfp.sys
14:39:05.0913 2376 epfwwfp - ok
14:39:05.0928 2376 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
14:39:05.0928 2376 ErrDev - ok
14:39:05.0960 2376 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
14:39:05.0960 2376 EventSystem - ok
14:39:05.0991 2376 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
14:39:05.0991 2376 exfat - ok
14:39:06.0006 2376 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
14:39:06.0006 2376 fastfat - ok
14:39:06.0038 2376 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
14:39:06.0038 2376 Fax - ok
14:39:06.0053 2376 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
14:39:06.0053 2376 fdc - ok
14:39:06.0069 2376 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
14:39:06.0069 2376 fdPHost - ok
14:39:06.0084 2376 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
14:39:06.0084 2376 FDResPub - ok
14:39:06.0100 2376 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
14:39:06.0100 2376 FileInfo - ok
14:39:06.0116 2376 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
14:39:06.0116 2376 Filetrace - ok
14:39:06.0131 2376 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
14:39:06.0131 2376 flpydisk - ok
14:39:06.0147 2376 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
14:39:06.0147 2376 FltMgr - ok
14:39:06.0162 2376 [ B6512A85815FDC3D560C3705F5BDB93D ] FontCache C:\Windows\system32\FntCache.dll
14:39:06.0178 2376 FontCache - ok
14:39:06.0209 2376 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:39:06.0209 2376 FontCache3.0.0.0 - ok
14:39:06.0225 2376 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
14:39:06.0225 2376 FsDepends - ok
14:39:06.0240 2376 [ A574B4360E438977038AAE4BF60D79A2 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
14:39:06.0240 2376 Fs_Rec - ok
14:39:06.0256 2376 [ 5592F5DBA26282D24D2B080EB438A4D7 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
14:39:06.0256 2376 fvevol - ok
14:39:06.0287 2376 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
14:39:06.0287 2376 gagp30kx - ok
14:39:06.0303 2376 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
14:39:06.0318 2376 gpsvc - ok
14:39:06.0365 2376 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
14:39:06.0381 2376 gupdate - ok
14:39:06.0381 2376 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
14:39:06.0381 2376 gupdatem - ok
14:39:06.0396 2376 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
14:39:06.0396 2376 hcw85cir - ok
14:39:06.0443 2376 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:39:06.0443 2376 HdAudAddService - ok
14:39:06.0474 2376 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
14:39:06.0474 2376 HDAudBus - ok
14:39:06.0490 2376 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
14:39:06.0490 2376 HidBatt - ok
14:39:06.0521 2376 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
14:39:06.0521 2376 HidBth - ok
14:39:06.0537 2376 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
14:39:06.0552 2376 HidIr - ok
14:39:06.0552 2376 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
14:39:06.0568 2376 hidserv - ok
14:39:06.0599 2376 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
14:39:06.0599 2376 HidUsb - ok
14:39:06.0615 2376 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
14:39:06.0630 2376 hkmsvc - ok
14:39:06.0630 2376 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:39:06.0646 2376 HomeGroupListener - ok
14:39:06.0677 2376 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:39:06.0677 2376 HomeGroupProvider - ok
14:39:06.0708 2376 [ 86A41BAB21B31F8A1B8F5FB93106B63F ] hotcore3 C:\Windows\system32\DRIVERS\hotcore3.sys
14:39:06.0708 2376 hotcore3 - ok
14:39:06.0786 2376 [ 1DAE5C46D42B02A6D5862E1482EFB390 ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
14:39:06.0786 2376 hpqcxs08 - ok
14:39:06.0818 2376 [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
14:39:06.0818 2376 hpqddsvc - ok
14:39:06.0833 2376 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
14:39:06.0833 2376 HpSAMD - ok
14:39:06.0864 2376 [ 79737E0F7D25DE8405CB34D4C9882253 ] HPSLPSVC C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL
14:39:06.0864 2376 HPSLPSVC - ok
14:39:06.0896 2376 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
14:39:06.0911 2376 HTTP - ok
14:39:06.0927 2376 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
14:39:06.0927 2376 hwpolicy - ok
14:39:06.0942 2376 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
14:39:06.0958 2376 i8042prt - ok
14:39:06.0974 2376 [ 934AF4D7C5F457B9F0743F4299B77B67 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
14:39:06.0974 2376 iaStorV - ok
14:39:07.0020 2376 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:39:07.0036 2376 idsvc - ok
14:39:07.0145 2376 [ C4097C4F60B7603B77E36715663D56EB ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
14:39:07.0161 2376 igfx - ok
14:39:07.0192 2376 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
14:39:07.0192 2376 iirsp - ok
14:39:07.0239 2376 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
14:39:07.0254 2376 IKEEXT - ok
14:39:07.0332 2376 [ 15D839BB1BD1BDE95AAE98B10AD88D8C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
14:39:07.0332 2376 IntcAzAudAddService - ok
14:39:07.0348 2376 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
14:39:07.0348 2376 intelide - ok
14:39:07.0364 2376 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
14:39:07.0364 2376 intelppm - ok
14:39:07.0379 2376 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
14:39:07.0379 2376 IPBusEnum - ok
14:39:07.0410 2376 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:39:07.0410 2376 IpFilterDriver - ok
14:39:07.0426 2376 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
14:39:07.0442 2376 iphlpsvc - ok
14:39:07.0457 2376 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
14:39:07.0457 2376 IPMIDRV - ok
14:39:07.0473 2376 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
14:39:07.0473 2376 IPNAT - ok
14:39:07.0488 2376 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
14:39:07.0488 2376 IRENUM - ok
14:39:07.0504 2376 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
14:39:07.0504 2376 isapnp - ok
14:39:07.0520 2376 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
14:39:07.0535 2376 iScsiPrt - ok
14:39:07.0551 2376 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
14:39:07.0551 2376 kbdclass - ok
14:39:07.0566 2376 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
14:39:07.0566 2376 kbdhid - ok
14:39:07.0566 2376 [ F42309C4191C506B71DB5D1126D26318 ] KeyIso C:\Windows\system32\lsass.exe
14:39:07.0582 2376 KeyIso - ok
14:39:07.0582 2376 [ E36A061EC11B373826905B21BE10948F ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
14:39:07.0598 2376 KSecDD - ok
14:39:07.0613 2376 [ 26C046977E85B95036453D7B88BA1820 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
14:39:07.0613 2376 KSecPkg - ok
14:39:07.0629 2376 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
14:39:07.0644 2376 KtmRm - ok
14:39:07.0676 2376 [ BCA92CB047A4326925ECEF759DBAA233 ] LanmanServer C:\Windows\system32\srvsvc.dll
14:39:07.0676 2376 LanmanServer - ok
14:39:07.0691 2376 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:39:07.0707 2376 LanmanWorkstation - ok
14:39:07.0722 2376 [ 170E7093A77AD586F3A012A3DB651D94 ] LGBusEnum C:\Windows\system32\drivers\LGBusEnum.sys
14:39:07.0722 2376 LGBusEnum - ok
14:39:07.0754 2376 [ 441669A8B37CF858AA91B0A5DFA4B721 ] LGSHidFilt C:\Windows\system32\DRIVERS\LGSHidFilt.Sys
14:39:07.0754 2376 LGSHidFilt - ok
14:39:07.0785 2376 [ D2DD04D1C8DF65EECD1F2C7FB947D43E ] LGVirHid C:\Windows\system32\drivers\LGVirHid.sys
14:39:07.0785 2376 LGVirHid - ok
14:39:07.0800 2376 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
14:39:07.0800 2376 lltdio - ok
14:39:07.0816 2376 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
14:39:07.0832 2376 lltdsvc - ok
14:39:07.0847 2376 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
14:39:07.0847 2376 lmhosts - ok
14:39:07.0863 2376 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
14:39:07.0863 2376 LSI_FC - ok
14:39:07.0878 2376 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
14:39:07.0878 2376 LSI_SAS - ok
14:39:07.0894 2376 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:39:07.0894 2376 LSI_SAS2 - ok
14:39:07.0910 2376 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:39:07.0910 2376 LSI_SCSI - ok
14:39:07.0910 2376 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
14:39:07.0910 2376 luafv - ok
14:39:07.0956 2376 [ 0C6EA0109CFEDF441F06D031E9A8D1A9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
14:39:07.0956 2376 MBAMProtector - ok
14:39:08.0019 2376 [ 0E08BDD7326E657D59DB40BAD23D8169 ] MBAMScheduler C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
14:39:08.0034 2376 MBAMScheduler - ok
14:39:08.0081 2376 [ A8E7F3DB083EB0839DFC1C763CDD2594 ] MBAMService C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
14:39:08.0081 2376 MBAMService - ok
14:39:08.0097 2376 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
14:39:08.0097 2376 Mcx2Svc - ok
14:39:08.0112 2376 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
14:39:08.0112 2376 megasas - ok
14:39:08.0128 2376 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
14:39:08.0128 2376 MegaSR - ok
14:39:08.0144 2376 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
14:39:08.0144 2376 MMCSS - ok
14:39:08.0159 2376 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
14:39:08.0159 2376 Modem - ok
14:39:08.0175 2376 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
14:39:08.0175 2376 monitor - ok
14:39:08.0206 2376 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
14:39:08.0206 2376 mouclass - ok
14:39:08.0222 2376 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
14:39:08.0237 2376 mouhid - ok
14:39:08.0268 2376 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
14:39:08.0268 2376 mountmgr - ok
14:39:08.0284 2376 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
14:39:08.0284 2376 mpio - ok
14:39:08.0300 2376 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
14:39:08.0300 2376 mpsdrv - ok
14:39:08.0315 2376 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
14:39:08.0315 2376 MpsSvc - ok
14:39:08.0346 2376 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
14:39:08.0346 2376 MRxDAV - ok
14:39:08.0362 2376 [ F4A054BE78AF7F410129C4B64B07DC9B ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
14:39:08.0362 2376 mrxsmb - ok
14:39:08.0378 2376 [ DEFFA295BD1895C6ED8E3078412AC60B ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:39:08.0378 2376 mrxsmb10 - ok
14:39:08.0378 2376 [ 24D76ABE5DCAD22F19D105F76FDF0CE1 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:39:08.0378 2376 mrxsmb20 - ok
14:39:08.0393 2376 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
14:39:08.0393 2376 msahci - ok
14:39:08.0409 2376 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
14:39:08.0409 2376 msdsm - ok
14:39:08.0424 2376 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
14:39:08.0424 2376 MSDTC - ok
14:39:08.0456 2376 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
14:39:08.0456 2376 Msfs - ok
14:39:08.0471 2376 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
14:39:08.0471 2376 mshidkmdf - ok
14:39:08.0487 2376 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
14:39:08.0487 2376 msisadrv - ok
14:39:08.0518 2376 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
14:39:08.0518 2376 MSiSCSI - ok
14:39:08.0534 2376 msiserver - ok
14:39:08.0549 2376 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
14:39:08.0549 2376 MSKSSRV - ok
14:39:08.0549 2376 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
14:39:08.0549 2376 MSPCLOCK - ok
14:39:08.0549 2376 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
14:39:08.0565 2376 MSPQM - ok
14:39:08.0580 2376 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
14:39:08.0580 2376 MsRPC - ok
14:39:08.0596 2376 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
14:39:08.0596 2376 mssmbios - ok
14:39:08.0612 2376 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
14:39:08.0612 2376 MSTEE - ok
14:39:08.0612 2376 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
14:39:08.0612 2376 MTConfig - ok
14:39:08.0627 2376 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
14:39:08.0627 2376 Mup - ok
14:39:08.0658 2376 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
14:39:08.0658 2376 napagent - ok
14:39:08.0674 2376 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
14:39:08.0674 2376 NativeWifiP - ok
14:39:08.0705 2376 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
14:39:08.0721 2376 NDIS - ok
14:39:08.0721 2376 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
14:39:08.0721 2376 NdisCap - ok
14:39:08.0752 2376 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
14:39:08.0752 2376 NdisTapi - ok
14:39:08.0768 2376 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
14:39:08.0768 2376 Ndisuio - ok
14:39:08.0783 2376 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
14:39:08.0783 2376 NdisWan - ok
14:39:08.0799 2376 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
14:39:08.0799 2376 NDProxy - ok
14:39:08.0814 2376 [ 510C138564486FF926A3F773205C63D1 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
14:39:08.0814 2376 Net Driver HPZ12 - ok
14:39:08.0830 2376 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
14:39:08.0830 2376 NetBIOS - ok
14:39:08.0846 2376 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
14:39:08.0846 2376 NetBT - ok
14:39:08.0861 2376 [ F42309C4191C506B71DB5D1126D26318 ] Netlogon C:\Windows\system32\lsass.exe
14:39:08.0861 2376 Netlogon - ok
14:39:08.0877 2376 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
14:39:08.0892 2376 Netman - ok
14:39:08.0908 2376 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:08.0908 2376 NetMsmqActivator - ok
14:39:08.0939 2376 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:08.0939 2376 NetPipeActivator - ok
14:39:08.0955 2376 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
14:39:08.0955 2376 netprofm - ok
14:39:08.0955 2376 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:08.0955 2376 NetTcpActivator - ok
14:39:08.0955 2376 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:08.0970 2376 NetTcpPortSharing - ok
14:39:08.0986 2376 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
14:39:08.0986 2376 nfrd960 - ok
14:39:09.0002 2376 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
14:39:09.0002 2376 NlaSvc - ok
14:39:09.0017 2376 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
14:39:09.0017 2376 Npfs - ok
14:39:09.0033 2376 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
14:39:09.0033 2376 nsi - ok
14:39:09.0048 2376 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
14:39:09.0048 2376 nsiproxy - ok
14:39:09.0080 2376 [ 3795DCD21F740EE799FB7223234215AF ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
14:39:09.0080 2376 Ntfs - ok
14:39:09.0095 2376 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
14:39:09.0095 2376 Null - ok
14:39:09.0142 2376 [ 9F8EE4948B7ADD9D12F778F61A2758A4 ] NVHDA C:\Windows\system32\drivers\nvhda32v.sys
14:39:09.0142 2376 NVHDA - ok
14:39:09.0329 2376 [ 8E3BD4ED84EEF035B1AF3F90141D13D1 ] nvlddmkm C:\Windows\system32\DRIVERS\nvlddmkm.sys
14:39:09.0392 2376 nvlddmkm - ok
14:39:09.0470 2376 [ 903A40C958D471F9D30D29FA6D2800A4 ] NvNetworkService C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
14:39:09.0485 2376 NvNetworkService - ok
14:39:09.0516 2376 [ 3F3D04B1D08D43C16EA7963954EC768D ] nvraid C:\Windows\system32\DRIVERS\nvraid.sys
14:39:09.0516 2376 nvraid - ok
14:39:09.0532 2376 [ C99F251A5DE63C6F129CF71933ACED0F ] nvstor C:\Windows\system32\DRIVERS\nvstor.sys
14:39:09.0532 2376 nvstor - ok
14:39:09.0813 2376 [ 0F4FE8097C56739DA9A8BD71DF868981 ] NvStreamSvc C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
14:39:09.0891 2376 NvStreamSvc - ok
14:39:09.0938 2376 [ 7A50B5448C45C0BEBFCF0E6481ABD73F ] nvsvc C:\Windows\system32\nvvsvc.exe
14:39:09.0938 2376 nvsvc - ok
14:39:09.0969 2376 [ DAC9726D9C90631D6A1C0ECAA0226021 ] nvvad_WaveExtensible C:\Windows\system32\drivers\nvvad32v.sys
14:39:09.0969 2376 nvvad_WaveExtensible - ok
14:39:09.0984 2376 [ 5A0983915F02BAE73267CC2A041F717D ] nv_agp C:\Windows\system32\DRIVERS\nv_agp.sys
14:39:10.0000 2376 nv_agp - ok
14:39:10.0062 2376 [ 84DE1DD996B48B05ACE31AD015FA108A ] odserv C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE
14:39:10.0062 2376 odserv - ok
14:39:10.0094 2376 [ 08A70A1F2CDDE9BB49B885CB817A66EB ] ohci1394 C:\Windows\system32\DRIVERS\ohci1394.sys
14:39:10.0094 2376 ohci1394 - ok
14:39:10.0125 2376 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:39:10.0125 2376 ose - ok
14:39:10.0156 2376 [ 82A8521DDC60710C3D3D3E7325209BEC ] p2pimsvc C:\Windows\system32\pnrpsvc.dll
14:39:10.0172 2376 p2pimsvc - ok
14:39:10.0187 2376 [ 59C3DDD501E39E006DAC31BF55150D91 ] p2psvc C:\Windows\system32\p2psvc.dll
14:39:10.0187 2376 p2psvc - ok
14:39:10.0218 2376 [ 2EA877ED5DD9713C5AC74E8EA7348D14 ] Parport C:\Windows\system32\DRIVERS\parport.sys
14:39:10.0218 2376 Parport - ok
14:39:10.0234 2376 [ FF4218952B51DE44FE910953A3E686B9 ] partmgr C:\Windows\system32\drivers\partmgr.sys
14:39:10.0234 2376 partmgr - ok
14:39:10.0265 2376 [ EB0A59F29C19B86479D36B35983DAADC ] Parvdm C:\Windows\system32\DRIVERS\parvdm.sys
14:39:10.0265 2376 Parvdm - ok
14:39:10.0281 2376 [ 358AB7956D3160000726574083DFC8A6 ] PcaSvc C:\Windows\System32\pcasvc.dll
14:39:10.0296 2376 PcaSvc - ok
14:39:10.0312 2376 [ C858CB77C577780ECC456A892E7E7D0F ] pci C:\Windows\system32\DRIVERS\pci.sys
14:39:10.0312 2376 pci - ok
14:39:10.0343 2376 [ AFE86F419014DB4E5593F69FFE26CE0A ] pciide C:\Windows\system32\DRIVERS\pciide.sys
14:39:10.0343 2376 pciide - ok
14:39:10.0359 2376 [ F396431B31693E71E8A80687EF523506 ] pcmcia C:\Windows\system32\DRIVERS\pcmcia.sys
14:39:10.0359 2376 pcmcia - ok
14:39:10.0390 2376 [ 250F6B43D2B613172035C6747AEEB19F ] pcw C:\Windows\system32\drivers\pcw.sys
14:39:10.0390 2376 pcw - ok
14:39:10.0421 2376 [ 9E0104BA49F4E6973749A02BF41344ED ] PEAUTH C:\Windows\system32\drivers\peauth.sys
14:39:10.0421 2376 PEAUTH - ok
14:39:10.0452 2376 [ AF4D64D2A57B9772CF3801950B8058A6 ] PeerDistSvc C:\Windows\system32\peerdistsvc.dll
14:39:10.0468 2376 PeerDistSvc - ok
14:39:10.0530 2376 [ 9C1BFF7910C89A1D12E57343475840CB ] pla C:\Windows\system32\pla.dll
14:39:10.0546 2376 pla - ok
14:39:10.0562 2376 [ 2CC2008F1296968FBA162ED9F9AFE328 ] PlugPlay C:\Windows\system32\umpnpmgr.dll
14:39:10.0577 2376 PlugPlay - ok
14:39:10.0593 2376 [ 37E5E8FFBAD35605DAEEC3224EA0E465 ] Pml Driver HPZ12 C:\Windows\system32\HPZipm12.dll
14:39:10.0593 2376 Pml Driver HPZ12 - ok
14:39:10.0608 2376 [ 63FF8572611249931EB16BB8EED6AFC8 ] PNRPAutoReg C:\Windows\system32\pnrpauto.dll
14:39:10.0608 2376 PNRPAutoReg - ok
14:39:10.0624 2376 [ 82A8521DDC60710C3D3D3E7325209BEC ] PNRPsvc C:\Windows\system32\pnrpsvc.dll
14:39:10.0624 2376 PNRPsvc - ok
14:39:10.0655 2376 [ 48E1B75C6DC0232FD92BAAE4BD344721 ] PolicyAgent C:\Windows\System32\ipsecsvc.dll
14:39:10.0655 2376 PolicyAgent - ok
14:39:10.0671 2376 [ DBFF83F709A91049621C1D35DD45C92C ] Power C:\Windows\system32\umpo.dll
14:39:10.0686 2376 Power - ok
14:39:10.0702 2376 [ 631E3E205AD6D86F2AED6A4A8E69F2DB ] PptpMiniport C:\Windows\system32\DRIVERS\raspptp.sys
14:39:10.0702 2376 PptpMiniport - ok
14:39:10.0718 2376 [ 85B1E3A0C7585BC4AAE6899EC6FCF011 ] Processor C:\Windows\system32\DRIVERS\processr.sys
14:39:10.0718 2376 Processor - ok
14:39:10.0733 2376 [ 630CF26F0227498B7D5A92B12548960F ] ProfSvc C:\Windows\system32\profsvc.dll
14:39:10.0733 2376 ProfSvc - ok
14:39:10.0749 2376 [ F42309C4191C506B71DB5D1126D26318 ] ProtectedStorage C:\Windows\system32\lsass.exe
14:39:10.0749 2376 ProtectedStorage - ok
14:39:10.0764 2376 [ 6270CCAE2A86DE6D146529FE55B3246A ] Psched C:\Windows\system32\DRIVERS\pacer.sys
14:39:10.0764 2376 Psched - ok
14:39:10.0796 2376 [ AB95ECF1F6659A60DDC166D8315B0751 ] ql2300 C:\Windows\system32\DRIVERS\ql2300.sys
14:39:10.0811 2376 ql2300 - ok
14:39:10.0827 2376 [ B4DD51DD25182244B86737DC51AF2270 ] ql40xx C:\Windows\system32\DRIVERS\ql40xx.sys
14:39:10.0827 2376 ql40xx - ok
14:39:10.0842 2376 [ 31AC809E7707EB580B2BDB760390765A ] QWAVE C:\Windows\system32\qwave.dll
14:39:10.0842 2376 QWAVE - ok
14:39:10.0858 2376 [ 584078CA1B95CA72DF2A27C336F9719D ] QWAVEdrv C:\Windows\system32\drivers\qwavedrv.sys
14:39:10.0858 2376 QWAVEdrv - ok
14:39:10.0874 2376 [ 30A81B53C766D0133BB86D234E5556AB ] RasAcd C:\Windows\system32\DRIVERS\rasacd.sys
14:39:10.0874 2376 RasAcd - ok
14:39:10.0889 2376 [ 57EC4AEF73660166074D8F7F31C0D4FD ] RasAgileVpn C:\Windows\system32\DRIVERS\AgileVpn.sys
14:39:10.0889 2376 RasAgileVpn - ok
14:39:10.0905 2376 [ A60F1839849C0C00739787FD5EC03F13 ] RasAuto C:\Windows\System32\rasauto.dll
14:39:10.0905 2376 RasAuto - ok
14:39:10.0920 2376 [ D9F91EAFEC2815365CBE6D167E4E332A ] Rasl2tp C:\Windows\system32\DRIVERS\rasl2tp.sys
14:39:10.0920 2376 Rasl2tp - ok
14:39:10.0936 2376 [ 0CE66EC736B7FC526D78F7624C7D2A94 ] RasMan C:\Windows\System32\rasmans.dll
14:39:10.0952 2376 RasMan - ok
14:39:10.0952 2376 [ 0FE8B15916307A6AC12BFB6A63E45507 ] RasPppoe C:\Windows\system32\DRIVERS\raspppoe.sys
14:39:10.0952 2376 RasPppoe - ok
14:39:10.0967 2376 [ 44101F495A83EA6401D886E7FD70096B ] RasSstp C:\Windows\system32\DRIVERS\rassstp.sys
14:39:10.0967 2376 RasSstp - ok
14:39:10.0983 2376 [ 835D7E81BF517A3B72384BDCC85E1CE6 ] rdbss C:\Windows\system32\DRIVERS\rdbss.sys
14:39:10.0983 2376 rdbss - ok
14:39:10.0998 2376 [ 0D8F05481CB76E70E1DA06EE9F0DA9DF ] rdpbus C:\Windows\system32\DRIVERS\rdpbus.sys
14:39:10.0998 2376 rdpbus - ok
14:39:11.0014 2376 [ 1E016846895B15A99F9A176A05029075 ] RDPCDD C:\Windows\system32\DRIVERS\RDPCDD.sys
14:39:11.0014 2376 RDPCDD - ok
14:39:11.0045 2376 [ C5FF95883FFEF704D50C40D21CFB3AB5 ] RDPDR C:\Windows\system32\drivers\rdpdr.sys
14:39:11.0045 2376 RDPDR - ok
14:39:11.0061 2376 [ 5A53CA1598DD4156D44196D200C94B8A ] RDPENCDD C:\Windows\system32\drivers\rdpencdd.sys
14:39:11.0061 2376 RDPENCDD - ok
14:39:11.0076 2376 [ 44B0A53CD4F27D50ED461DAE0C0B4E1F ] RDPREFMP C:\Windows\system32\drivers\rdprefmp.sys
14:39:11.0076 2376 RDPREFMP - ok
14:39:11.0092 2376 [ 801371BA9782282892D00AADB08EE367 ] RDPWD C:\Windows\system32\drivers\RDPWD.sys
14:39:11.0092 2376 RDPWD - ok
14:39:11.0108 2376 [ 4EA225BF1CF05E158853F30A99CA29A7 ] rdyboost C:\Windows\system32\drivers\rdyboost.sys
14:39:11.0108 2376 rdyboost - ok
14:39:11.0139 2376 [ 7B5E1419717FAC363A31CC302895217A ] RemoteAccess C:\Windows\System32\mprdim.dll
14:39:11.0139 2376 RemoteAccess - ok
14:39:11.0154 2376 [ CB9A8683F4EF2BF99E123D79950D7935 ] RemoteRegistry C:\Windows\system32\regsvc.dll
14:39:11.0154 2376 RemoteRegistry - ok
14:39:11.0186 2376 [ 78D072F35BC45D9E4E1B61895C152234 ] RpcEptMapper C:\Windows\System32\RpcEpMap.dll
14:39:11.0186 2376 RpcEptMapper - ok
14:39:11.0201 2376 [ 94D36C0E44677DD26981D2BFEEF2A29D ] RpcLocator C:\Windows\system32\locator.exe
14:39:11.0201 2376 RpcLocator - ok
14:39:11.0217 2376 [ B82CD39E336973359D7C9BF911E8E84F ] RpcSs C:\Windows\system32\rpcss.dll
14:39:11.0217 2376 RpcSs - ok
14:39:11.0232 2376 [ 032B0D36AD92B582D869879F5AF5B928 ] rspndr C:\Windows\system32\DRIVERS\rspndr.sys
14:39:11.0232 2376 rspndr - ok
14:39:11.0279 2376 [ 26A9D6227D12B9D9DA5A81BB9B55D810 ] RTL8167 C:\Windows\system32\DRIVERS\Rt86win7.sys
14:39:11.0279 2376 RTL8167 - ok
14:39:11.0310 2376 [ 5423D8437051E89DD34749F242C98648 ] s3cap C:\Windows\system32\DRIVERS\vms3cap.sys
14:39:11.0310 2376 s3cap - ok
14:39:11.0326 2376 [ F42309C4191C506B71DB5D1126D26318 ] SamSs C:\Windows\system32\lsass.exe
14:39:11.0326 2376 SamSs - ok
14:39:11.0357 2376 [ 34EE0C44B724E3E4CE2EFF29126DE5B5 ] sbp2port C:\Windows\system32\DRIVERS\sbp2port.sys
14:39:11.0357 2376 sbp2port - ok
14:39:11.0373 2376 [ 8FC518FFE9519C2631D37515A68009C4 ] SCardSvr C:\Windows\System32\SCardSvr.dll
14:39:11.0373 2376 SCardSvr - ok
14:39:11.0388 2376 [ A95C54B2AC3CC9C73FCDF9E51A1D6B51 ] scfilter C:\Windows\system32\DRIVERS\scfilter.sys
14:39:11.0388 2376 scfilter - ok
14:39:11.0420 2376 [ 3E8B0C453E25613A1F59762A5C42AA75 ] Schedule C:\Windows\system32\schedsvc.dll
14:39:11.0420 2376 Schedule - ok
14:39:11.0451 2376 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] SCPolicySvc C:\Windows\System32\certprop.dll
14:39:11.0451 2376 SCPolicySvc - ok
14:39:11.0466 2376 [ 5FD90ABDBFAEE85986802622CBB03446 ] SDRSVC C:\Windows\System32\SDRSVC.dll
14:39:11.0466 2376 SDRSVC - ok
14:39:11.0482 2376 [ 90A3935D05B494A5A39D37E71F09A677 ] secdrv C:\Windows\system32\drivers\secdrv.sys
14:39:11.0498 2376 secdrv - ok
14:39:11.0498 2376 [ A59B3A4442C52060CC7A85293AA3546F ] seclogon C:\Windows\system32\seclogon.dll
14:39:11.0498 2376 seclogon - ok
14:39:11.0529 2376 [ DCB7FCDCC97F87360F75D77425B81737 ] SENS C:\Windows\System32\sens.dll
14:39:11.0529 2376 SENS - ok
14:39:11.0576 2376 [ 50087FE1EE447009C9CC2997B90DE53F ] SensrSvc C:\Windows\system32\sensrsvc.dll
14:39:11.0576 2376 SensrSvc - ok
14:39:11.0591 2376 [ 9AD8B8B515E3DF6ACD4212EF465DE2D1 ] Serenum C:\Windows\system32\DRIVERS\serenum.sys
14:39:11.0591 2376 Serenum - ok
14:39:11.0607 2376 [ 5FB7FCEA0490D821F26F39CC5EA3D1E2 ] Serial C:\Windows\system32\DRIVERS\serial.sys
14:39:11.0607 2376 Serial - ok
14:39:11.0622 2376 [ 79BFFB520327FF916A582DFEA17AA813 ] sermouse C:\Windows\system32\DRIVERS\sermouse.sys
14:39:11.0622 2376 sermouse - ok
14:39:11.0638 2376 [ 8F55CE568C543D5ADF45C409D16718FC ] SessionEnv C:\Windows\system32\sessenv.dll
14:39:11.0654 2376 SessionEnv - ok
14:39:11.0654 2376 [ 9F976E1EB233DF46FCE808D9DEA3EB9C ] sffdisk C:\Windows\system32\DRIVERS\sffdisk.sys
14:39:11.0654 2376 sffdisk - ok
14:39:11.0669 2376 [ 932A68EE27833CFD57C1639D375F2731 ] sffp_mmc C:\Windows\system32\DRIVERS\sffp_mmc.sys
14:39:11.0669 2376 sffp_mmc - ok
14:39:11.0685 2376 [ 4F1E5B0FE7C8050668DBFADE8999AEFB ] sffp_sd C:\Windows\system32\DRIVERS\sffp_sd.sys
14:39:11.0685 2376 sffp_sd - ok
14:39:11.0700 2376 [ DB96666CC8312EBC45032F30B007A547 ] sfloppy C:\Windows\system32\DRIVERS\sfloppy.sys
14:39:11.0700 2376 sfloppy - ok
14:39:11.0716 2376 [ D1A079A0DE2EA524513B6930C24527A2 ] SharedAccess C:\Windows\System32\ipnathlp.dll
14:39:11.0716 2376 SharedAccess - ok
14:39:11.0747 2376 [ CD2E48FA5B29EE2B3B5858056D246EF2 ] ShellHWDetection C:\Windows\System32\shsvcs.dll
14:39:11.0763 2376 ShellHWDetection - ok
14:39:11.0778 2376 [ 2565CAC0DC9FE0371BDCE60832582B2E ] sisagp C:\Windows\system32\DRIVERS\sisagp.sys
14:39:11.0778 2376 sisagp - ok
14:39:11.0794 2376 [ A9F0486851BECB6DDA1D89D381E71055 ] SiSRaid2 C:\Windows\system32\DRIVERS\SiSRaid2.sys
14:39:11.0794 2376 SiSRaid2 - ok
14:39:11.0810 2376 [ 3727097B55738E2F554972C3BE5BC1AA ] SiSRaid4 C:\Windows\system32\DRIVERS\sisraid4.sys
14:39:11.0810 2376 SiSRaid4 - ok
14:39:11.0825 2376 [ 50D9949020E02B847CD48F1243FCB895 ] SkypeUpdate C:\Program Files\Skype\Updater\Updater.exe
14:39:11.0841 2376 SkypeUpdate - ok
14:39:11.0856 2376 [ 3E21C083B8A01CB70BA1F09303010FCE ] Smb C:\Windows\system32\DRIVERS\smb.sys
14:39:11.0856 2376 Smb - ok
14:39:11.0888 2376 [ 6A984831644ECA1A33FFEAE4126F4F37 ] SNMPTRAP C:\Windows\System32\snmptrap.exe
14:39:11.0888 2376 SNMPTRAP - ok
14:39:11.0903 2376 [ 95CF1AE7527FB70F7816563CBC09D942 ] spldr C:\Windows\system32\drivers\spldr.sys
14:39:11.0903 2376 spldr - ok
14:39:11.0919 2376 [ 49B6DD6AB3715B7A67965F17194E98A9 ] Spooler C:\Windows\System32\spoolsv.exe
14:39:11.0934 2376 Spooler - ok
14:39:11.0981 2376 [ 4C287F9069FEDBD791178876EE9DE536 ] sppsvc C:\Windows\system32\sppsvc.exe
14:39:12.0012 2376 sppsvc - ok
14:39:12.0012 2376 [ D8E3E19EEBDAB49DD4A8D3062EAD4EC7 ] sppuinotify C:\Windows\system32\sppuinotify.dll
14:39:12.0028 2376 sppuinotify - ok
14:39:12.0044 2376 [ 2BA4EBC7DFBA845A1EDBE1F75913BE33 ] srv C:\Windows\system32\DRIVERS\srv.sys
14:39:12.0044 2376 srv - ok
14:39:12.0059 2376 [ DCE7E10FEAABD4CAE95948B3DE5340BB ] srv2 C:\Windows\system32\DRIVERS\srv2.sys
14:39:12.0059 2376 srv2 - ok
14:39:12.0059 2376 [ B5665BAA2120B8A54E22E9CD07C05106 ] srvnet C:\Windows\system32\DRIVERS\srvnet.sys
14:39:12.0059 2376 srvnet - ok
14:39:12.0075 2376 [ D887C9FD02AC9FA880F6E5027A43E118 ] SSDPSRV C:\Windows\System32\ssdpsrv.dll
14:39:12.0075 2376 SSDPSRV - ok
14:39:12.0090 2376 [ D318F23BE45D5E3A107469EB64815B50 ] SstpSvc C:\Windows\system32\sstpsvc.dll
14:39:12.0090 2376 SstpSvc - ok
14:39:12.0153 2376 [ CDA9313E34887A111B8309B55BCDCD82 ] Stereo Service C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
14:39:12.0153 2376 Stereo Service - ok
14:39:12.0168 2376 [ DB32D325C192B801DF274BFD12A7E72B ] stexstor C:\Windows\system32\DRIVERS\stexstor.sys
14:39:12.0168 2376 stexstor - ok
14:39:12.0200 2376 [ A22825E7BB7018E8AF3E229A5AF17221 ] StiSvc C:\Windows\System32\wiaservc.dll
14:39:12.0200 2376 StiSvc - ok
14:39:12.0262 2376 [ 957E346CA948668F2496A6CCF6FF82CC ] storflt C:\Windows\system32\DRIVERS\vmstorfl.sys
14:39:12.0262 2376 storflt - ok
14:39:12.0278 2376 [ 0BF669F0A910BEDA4A32258D363AF2A5 ] StorSvc C:\Windows\system32\storsvc.dll
14:39:12.0278 2376 StorSvc - ok
14:39:12.0309 2376 [ D5751969DC3E4B88BF482AC8EC9FE019 ] storvsc C:\Windows\system32\DRIVERS\storvsc.sys
14:39:12.0309 2376 storvsc - ok
14:39:12.0324 2376 [ E58C78A848ADD9610A4DB6D214AF5224 ] swenum C:\Windows\system32\DRIVERS\swenum.sys
14:39:12.0324 2376 swenum - ok
14:39:12.0356 2376 [ A28BD92DF340E57B024BA433165D34D7 ] swprv C:\Windows\System32\swprv.dll
14:39:12.0356 2376 swprv - ok
14:39:12.0387 2376 [ 04105C8DA62353589C29BDAEB8D88BD8 ] SysMain C:\Windows\system32\sysmain.dll
14:39:12.0402 2376 SysMain - ok
14:39:12.0418 2376 [ FCFB6C552FBC0DA299799CBD50AD9FD4 ] TabletInputService C:\Windows\System32\TabSvc.dll
14:39:12.0418 2376 TabletInputService - ok
14:39:12.0434 2376 [ 2F46B0C70A4ADC8C90CF825DA3B4FEAF ] TapiSrv C:\Windows\System32\tapisrv.dll
14:39:12.0434 2376 TapiSrv - ok
14:39:12.0449 2376 [ B799D9FDB26111737F58288D8DC172D9 ] TBS C:\Windows\System32\tbssvc.dll
14:39:12.0449 2376 TBS - ok
14:39:12.0496 2376 [ E9B0F39AC0BF0DF78E106D369F1ABFD6 ] TBSrv C:\Program Files\Tbccint\ToolbarService\ToolbarService.exe
14:39:12.0496 2376 TBSrv - ok
14:39:12.0527 2376 [ 2CC3D75488ABD3EC628BBB9A4FC84EFC ] Tcpip C:\Windows\system32\drivers\tcpip.sys
14:39:12.0543 2376 Tcpip - ok
14:39:12.0558 2376 [ 2CC3D75488ABD3EC628BBB9A4FC84EFC ] TCPIP6 C:\Windows\system32\DRIVERS\tcpip.sys
14:39:12.0574 2376 TCPIP6 - ok
14:39:12.0590 2376 [ E64444523ADD154F86567C469BC0B17F ] tcpipreg C:\Windows\system32\drivers\tcpipreg.sys
14:39:12.0590 2376 tcpipreg - ok
14:39:12.0605 2376 [ 1875C1490D99E70E449E3AFAE9FCBADF ] TDPIPE C:\Windows\system32\drivers\tdpipe.sys
14:39:12.0605 2376 TDPIPE - ok
14:39:12.0605 2376 [ 7551E91EA999EE9A8E9C331D5A9C31F3 ] TDTCP C:\Windows\system32\drivers\tdtcp.sys
14:39:12.0605 2376 TDTCP - ok
14:39:12.0621 2376 [ CB39E896A2A83702D1737BFD402B3542 ] tdx C:\Windows\system32\DRIVERS\tdx.sys
14:39:12.0621 2376 tdx - ok
14:39:12.0652 2376 [ C36F41EE20E6999DBF4B0425963268A5 ] TermDD C:\Windows\system32\DRIVERS\termdd.sys
14:39:12.0652 2376 TermDD - ok
14:39:12.0683 2376 [ A01E50A04D7B1960B33E92B9080E6A94 ] TermService C:\Windows\System32\termsrv.dll
14:39:12.0683 2376 TermService - ok
14:39:12.0699 2376 [ 42FB6AFD6B79D9FE07381609172E7CA4 ] Themes C:\Windows\system32\themeservice.dll
14:39:12.0714 2376 Themes - ok
14:39:12.0714 2376 [ 146B6F43A673379A3C670E86D89BE5EA ] THREADORDER C:\Windows\system32\mmcss.dll
14:39:12.0714 2376 THREADORDER - ok
14:39:12.0746 2376 [ 4792C0378DB99A9BC2AE2DE6CFFF0C3A ] TrkWks C:\Windows\System32\trkwks.dll
14:39:12.0746 2376 TrkWks - ok
14:39:12.0777 2376 [ 41A4C781D2286208D397D72099304133 ] TrustedInstaller C:\Windows\servicing\TrustedInstaller.exe
14:39:12.0777 2376 TrustedInstaller - ok
14:39:12.0792 2376 [ 98AE6FA07D12CB4EC5CF4A9BFA5F4242 ] tssecsrv C:\Windows\system32\DRIVERS\tssecsrv.sys
14:39:12.0792 2376 tssecsrv - ok
14:39:12.0808 2376 [ 3E461D890A97F9D4C168F5FDA36E1D00 ] tunnel C:\Windows\system32\DRIVERS\tunnel.sys
14:39:12.0824 2376 tunnel - ok
14:39:12.0824 2376 [ 750FBCB269F4D7DD2E420C56B795DB6D ] uagp35 C:\Windows\system32\DRIVERS\uagp35.sys
14:39:12.0839 2376 uagp35 - ok
14:39:12.0855 2376 [ 09CC3E16F8E5EE7168E01CF8FCBE061A ] udfs C:\Windows\system32\DRIVERS\udfs.sys
14:39:12.0855 2376 udfs - ok

Pokračování logu TDSSKiller:

14:39:12.0870 2376 [ 8344FD4FCE927880AA1AA7681D4927E5 ] UI0Detect C:\Windows\system32\UI0Detect.exe
14:39:12.0870 2376 UI0Detect - ok
14:39:12.0902 2376 [ 5E86DBB68D49B3A0DA99F76F1C2CAB01 ] UimBus C:\Windows\system32\DRIVERS\UimBus.sys
14:39:12.0902 2376 UimBus - ok
14:39:12.0933 2376 [ 05CA10764D2E1B5F822E966FF96D9F1F ] Uim_IM C:\Windows\system32\Drivers\Uim_IM.sys
14:39:12.0933 2376 Uim_IM - ok
14:39:12.0948 2376 [ 44E8048ACE47BEFBFDC2E9BE4CBC8880 ] uliagpkx C:\Windows\system32\DRIVERS\uliagpkx.sys
14:39:12.0948 2376 uliagpkx - ok
14:39:12.0964 2376 [ 049B3A50B3D646BAEEEE9EEC9B0668DC ] umbus C:\Windows\system32\DRIVERS\umbus.sys
14:39:12.0964 2376 umbus - ok
14:39:12.0980 2376 [ 7550AD0C6998BA1CB4843E920EE0FEAC ] UmPass C:\Windows\system32\DRIVERS\umpass.sys
14:39:12.0980 2376 UmPass - ok
14:39:12.0995 2376 [ 8ECACA5454844F66386F7BE4AE0D7CD1 ] UmRdpService C:\Windows\System32\umrdp.dll
14:39:13.0011 2376 UmRdpService - ok
14:39:13.0026 2376 [ 833FBB672460EFCE8011D262175FAD33 ] upnphost C:\Windows\System32\upnphost.dll
14:39:13.0026 2376 upnphost - ok
14:39:13.0058 2376 [ 2436A42AAB4AD48A9B714E5B0F344627 ] usbaudio C:\Windows\system32\drivers\usbaudio.sys
14:39:13.0058 2376 usbaudio - ok
14:39:13.0058 2376 [ 8455C4ED038EFD09E99327F9D2D48FFA ] usbccgp C:\Windows\system32\DRIVERS\usbccgp.sys
14:39:13.0058 2376 usbccgp - ok
14:39:13.0089 2376 [ 04EC7CEC62EC3B6D9354EEE93327FC82 ] usbcir C:\Windows\system32\DRIVERS\usbcir.sys
14:39:13.0089 2376 usbcir - ok
14:39:13.0104 2376 [ 1C333BFD60F2FED2C7AD5DAF533CB742 ] usbehci C:\Windows\system32\DRIVERS\usbehci.sys
14:39:13.0104 2376 usbehci - ok
14:39:13.0120 2376 [ EE6EF93CCFA94FAE8C6AB298273D8AE2 ] usbhub C:\Windows\system32\DRIVERS\usbhub.sys
14:39:13.0136 2376 usbhub - ok
14:39:13.0136 2376 [ A6FB7957EA7AFB1165991E54CE934B74 ] usbohci C:\Windows\system32\DRIVERS\usbohci.sys
14:39:13.0136 2376 usbohci - ok
14:39:13.0167 2376 [ 797D862FE0875E75C7CC4C1AD7B30252 ] usbprint C:\Windows\system32\DRIVERS\usbprint.sys
14:39:13.0167 2376 usbprint - ok
14:39:13.0182 2376 [ 576096CCBC07E7C4EA4F5E6686D6888F ] usbscan C:\Windows\system32\DRIVERS\usbscan.sys
14:39:13.0182 2376 usbscan - ok
14:39:13.0198 2376 [ D8889D56E0D27E57ED4591837FE71D27 ] USBSTOR C:\Windows\system32\DRIVERS\USBSTOR.SYS
14:39:13.0198 2376 USBSTOR - ok
14:39:13.0214 2376 [ 78780C3EBCE17405B1CCD07A3A8A7D72 ] usbuhci C:\Windows\system32\DRIVERS\usbuhci.sys
14:39:13.0214 2376 usbuhci - ok
14:39:13.0214 2376 [ 081E6E1C91AEC36758902A9F727CD23C ] UxSms C:\Windows\System32\uxsms.dll
14:39:13.0229 2376 UxSms - ok
14:39:13.0245 2376 [ F42309C4191C506B71DB5D1126D26318 ] VaultSvc C:\Windows\system32\lsass.exe
14:39:13.0245 2376 VaultSvc - ok
14:39:13.0245 2376 [ A059C4C3EDB09E07D21A8E5C0AABD3CB ] vdrvroot C:\Windows\system32\DRIVERS\vdrvroot.sys
14:39:13.0260 2376 vdrvroot - ok
14:39:13.0276 2376 [ 8C4E7C49D3641BC9E299E466A7F8867D ] vds C:\Windows\System32\vds.exe
14:39:13.0276 2376 vds - ok
14:39:13.0292 2376 [ 17C408214EA61696CEC9C66E388B14F3 ] vga C:\Windows\system32\DRIVERS\vgapnp.sys
14:39:13.0292 2376 vga - ok
14:39:13.0307 2376 [ 8E38096AD5C8570A6F1570A61E251561 ] VgaSave C:\Windows\System32\drivers\vga.sys
14:39:13.0307 2376 VgaSave - ok
14:39:13.0338 2376 [ 3BE6E1F3A4F1AFEC8CEE0D7883F93583 ] vhdmp C:\Windows\system32\DRIVERS\vhdmp.sys
14:39:13.0338 2376 vhdmp - ok
14:39:13.0354 2376 [ C829317A37B4BEA8F39735D4B076E923 ] viaagp C:\Windows\system32\DRIVERS\viaagp.sys
14:39:13.0354 2376 viaagp - ok
14:39:13.0354 2376 [ E02F079A6AA107F06B16549C6E5C7B74 ] ViaC7 C:\Windows\system32\DRIVERS\viac7.sys
14:39:13.0354 2376 ViaC7 - ok
14:39:13.0370 2376 [ E43574F6A56A0EE11809B48C09E4FD3C ] viaide C:\Windows\system32\DRIVERS\viaide.sys
14:39:13.0370 2376 viaide - ok
14:39:13.0401 2376 [ 379B349F65F453D2A6E75EA6B7448E49 ] vmbus C:\Windows\system32\DRIVERS\vmbus.sys
14:39:13.0401 2376 vmbus - ok
14:39:13.0416 2376 [ EC2BBAB4B84D0738C6C83D2234DC36FE ] VMBusHID C:\Windows\system32\DRIVERS\VMBusHID.sys
14:39:13.0416 2376 VMBusHID - ok
14:39:13.0432 2376 [ 384E5A2AA49934295171E499F86BA6F3 ] volmgr C:\Windows\system32\DRIVERS\volmgr.sys
14:39:13.0432 2376 volmgr - ok
14:39:13.0432 2376 [ B5BB72067DDDDBBFB04B2F89FF8C3C87 ] volmgrx C:\Windows\system32\drivers\volmgrx.sys
14:39:13.0448 2376 volmgrx - ok
14:39:13.0463 2376 [ 58DF9D2481A56EDDE167E51B334D44FD ] volsnap C:\Windows\system32\DRIVERS\volsnap.sys
14:39:13.0463 2376 volsnap - ok
14:39:13.0479 2376 [ 9DFA0CC2F8855A04816729651175B631 ] vsmraid C:\Windows\system32\DRIVERS\vsmraid.sys
14:39:13.0479 2376 vsmraid - ok
14:39:13.0526 2376 [ 7EA2BCD94D9CFAF4C556F5CC94532A6C ] VSS C:\Windows\system32\vssvc.exe
14:39:13.0526 2376 VSS - ok
14:39:13.0541 2376 [ 90567B1E658001E79D7C8BBD3DDE5AA6 ] vwifibus C:\Windows\System32\drivers\vwifibus.sys
14:39:13.0541 2376 vwifibus - ok
14:39:13.0572 2376 [ 55187FD710E27D5095D10A472C8BAF1C ] W32Time C:\Windows\system32\w32time.dll
14:39:13.0572 2376 W32Time - ok
14:39:13.0588 2376 [ DE3721E89C653AA281428C8A69745D90 ] WacomPen C:\Windows\system32\DRIVERS\wacompen.sys
14:39:13.0588 2376 WacomPen - ok
14:39:13.0619 2376 [ 692A712062146E96D28BA0B7D75DE31B ] WANARP C:\Windows\system32\DRIVERS\wanarp.sys
14:39:13.0619 2376 WANARP - ok
14:39:13.0619 2376 [ 692A712062146E96D28BA0B7D75DE31B ] Wanarpv6 C:\Windows\system32\DRIVERS\wanarp.sys
14:39:13.0619 2376 Wanarpv6 - ok
14:39:13.0650 2376 [ 7790B77FE1E5EE47DCC66247095BB4C9 ] wbengine C:\Windows\system32\wbengine.exe
14:39:13.0666 2376 wbengine - ok
14:39:13.0682 2376 [ 9614B5D29DC76AC3C29F6D2D3AA70E67 ] WbioSrvc C:\Windows\System32\wbiosrvc.dll
14:39:13.0682 2376 WbioSrvc - ok
14:39:13.0697 2376 [ D0F88AA11EE1A62BCC6D6A8A7783CA11 ] wcncsvc C:\Windows\System32\wcncsvc.dll
14:39:13.0697 2376 wcncsvc - ok
14:39:13.0713 2376 [ 5D930B6357A6D2AF4D7653BDABBF352F ] WcsPlugInService C:\Windows\System32\WcsPlugInService.dll
14:39:13.0713 2376 WcsPlugInService - ok
14:39:13.0728 2376 [ 1112A9BADACB47B7C0BB0392E3158DFF ] Wd C:\Windows\system32\DRIVERS\wd.sys
14:39:13.0728 2376 Wd - ok
14:39:13.0744 2376 [ 9950E3D0F08141C7E89E64456AE7DC73 ] Wdf01000 C:\Windows\system32\drivers\Wdf01000.sys
14:39:13.0744 2376 Wdf01000 - ok
14:39:13.0760 2376 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiServiceHost C:\Windows\system32\wdi.dll
14:39:13.0760 2376 WdiServiceHost - ok
14:39:13.0760 2376 [ 46EF9DC96265FD0B423DB72E7C38C2A5 ] WdiSystemHost C:\Windows\system32\wdi.dll
14:39:13.0760 2376 WdiSystemHost - ok
14:39:13.0775 2376 [ D87C7D2C517F82A5AB7A73E203063D9E ] WebClient C:\Windows\System32\webclnt.dll
14:39:13.0775 2376 WebClient - ok
14:39:13.0791 2376 [ 760F0AFE937A77CFF27153206534F275 ] Wecsvc C:\Windows\system32\wecsvc.dll
14:39:13.0791 2376 Wecsvc - ok
14:39:13.0791 2376 [ AC804569BB2364FB6017370258A4091B ] wercplsupport C:\Windows\System32\wercplsupport.dll
14:39:13.0791 2376 wercplsupport - ok
14:39:13.0822 2376 [ 08E420D873E4FD85241EE2421B02C4A4 ] WerSvc C:\Windows\System32\WerSvc.dll
14:39:13.0822 2376 WerSvc - ok
14:39:13.0838 2376 [ 8B9A943F3B53861F2BFAF6C186168F79 ] WfpLwf C:\Windows\system32\DRIVERS\wfplwf.sys
14:39:13.0838 2376 WfpLwf - ok
14:39:13.0853 2376 [ 5CF95B35E59E2A38023836FFF31BE64C ] WIMMount C:\Windows\system32\drivers\wimmount.sys
14:39:13.0853 2376 WIMMount - ok
14:39:13.0884 2376 [ 3FAE8F94296001C32EAB62CD7D82E0FD ] WinDefend C:\Program Files\Windows Defender\mpsvc.dll
14:39:13.0884 2376 WinDefend - ok
14:39:13.0900 2376 WinHttpAutoProxySvc - ok
14:39:13.0947 2376 [ F62E510B6AD4C21EB9FE8668ED251826 ] Winmgmt C:\Windows\system32\wbem\WMIsvc.dll
14:39:13.0947 2376 Winmgmt - ok
14:39:13.0994 2376 [ C4F5D3901D1B41D602DDC196E0B95B51 ] WinRM C:\Windows\system32\WsmSvc.dll
14:39:14.0009 2376 WinRM - ok
14:39:14.0056 2376 [ 30FC6E5448D0CBAAA95280EEEF7FEDAE ] WinUsb C:\Windows\system32\DRIVERS\WinUsb.sys
14:39:14.0056 2376 WinUsb - ok
14:39:14.0087 2376 [ 16935C98FF639D185086A3529B1F2067 ] Wlansvc C:\Windows\System32\wlansvc.dll
14:39:14.0103 2376 Wlansvc - ok
14:39:14.0118 2376 [ 0217679B8FCA58714C3BF2726D2CA84E ] WmiAcpi C:\Windows\system32\DRIVERS\wmiacpi.sys
14:39:14.0118 2376 WmiAcpi - ok
14:39:14.0134 2376 [ 6EB6B66517B048D87DC1856DDF1F4C3F ] wmiApSrv C:\Windows\system32\wbem\WmiApSrv.exe
14:39:14.0134 2376 wmiApSrv - ok
14:39:14.0165 2376 [ 77FBD400984CF72BA0FC4B3489D65F74 ] WMPNetworkSvc C:\Program Files\Windows Media Player\wmpnetwk.exe
14:39:14.0181 2376 WMPNetworkSvc - ok
14:39:14.0181 2376 [ A2F0EC770A92F2B3F9DE6D518E11409C ] WPCSvc C:\Windows\System32\wpcsvc.dll
14:39:14.0196 2376 WPCSvc - ok
14:39:14.0196 2376 [ B7F658A2EBC07129538AD9AB35212637 ] WPDBusEnum C:\Windows\system32\wpdbusenum.dll
14:39:14.0212 2376 WPDBusEnum - ok
14:39:14.0228 2376 [ 6DB3276587B853BF886B69528FDB048C ] ws2ifsl C:\Windows\system32\drivers\ws2ifsl.sys
14:39:14.0243 2376 ws2ifsl - ok
14:39:14.0259 2376 [ 6F5D49EFE0E7164E03AE773A3FE25340 ] wscsvc C:\Windows\System32\wscsvc.dll
14:39:14.0274 2376 wscsvc - ok
14:39:14.0274 2376 WSearch - ok
14:39:14.0321 2376 [ A33408CC036F9C08142B11BE5E93F0A1 ] wuauserv C:\Windows\system32\wuaueng.dll
14:39:14.0337 2376 wuauserv - ok
14:39:14.0352 2376 [ 6F9B6C0C93232CFF47D0F72D6DB1D21E ] WudfPf C:\Windows\system32\drivers\WudfPf.sys
14:39:14.0352 2376 WudfPf - ok
14:39:14.0384 2376 [ F91FF1E51FCA30B3C3981DB7D5924252 ] WUDFRd C:\Windows\system32\DRIVERS\WUDFRd.sys
14:39:14.0384 2376 WUDFRd - ok
14:39:14.0399 2376 [ DDEE3682FE97037C45F4D7AB467CB8B6 ] wudfsvc C:\Windows\System32\WUDFSvc.dll
14:39:14.0399 2376 wudfsvc - ok
14:39:14.0430 2376 [ FF2D745B560F7C71B31F30F4D49F73D2 ] WwanSvc C:\Windows\System32\wwansvc.dll
14:39:14.0430 2376 WwanSvc - ok
14:39:14.0446 2376 ================ Scan global ===============================
14:39:14.0477 2376 [ 9A595DF601070DA78C40481120DD2C06 ] C:\Windows\system32\basesrv.dll
14:39:14.0493 2376 [ 827E4F75901CA3F990B1487D3301841E ] C:\Windows\system32\winsrv.dll
14:39:14.0508 2376 [ 827E4F75901CA3F990B1487D3301841E ] C:\Windows\system32\winsrv.dll
14:39:14.0524 2376 [ 364455805E64882844EE9ACB72522830 ] C:\Windows\system32\sxssrv.dll
14:39:14.0540 2376 [ 5F1B6A9C35D3D5CA72D6D6FDEF9747D6 ] C:\Windows\system32\services.exe
14:39:14.0540 2376 [Global] - ok
14:39:14.0540 2376 ================ Scan MBR ==================================
14:39:14.0555 2376 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
14:39:14.0914 2376 \Device\Harddisk0\DR0 - ok
14:39:14.0914 2376 ================ Scan VBR ==================================
14:39:14.0961 2376 [ 142A7594288020E462512860FEFAF460 ] \Device\Harddisk0\DR0\Partition1
14:39:14.0992 2376 \Device\Harddisk0\DR0\Partition1 - ok
14:39:15.0039 2376 [ 0534E5FD1198CFC3EA9BADA25EEC1A52 ] \Device\Harddisk0\DR0\Partition2
14:39:15.0054 2376 \Device\Harddisk0\DR0\Partition2 - ok
14:39:15.0054 2376 ============================================================
14:39:15.0054 2376 Scan finished
14:39:15.0054 2376 ============================================================
14:39:15.0070 2268 Detected object count: 0
14:39:15.0070 2268 Actual detected object count: 0
14:39:21.0138 3684 ============================================================
14:39:21.0138 3684 Scan started
14:39:21.0138 3684 Mode: Manual;
14:39:21.0138 3684 ============================================================
14:39:21.0341 3684 ================ Scan system memory ========================
14:39:21.0341 3684 System memory - ok
14:39:21.0357 3684 ================ Scan services =============================
14:39:21.0482 3684 [ 6D2ACA41739BFE8CB86EE8E85F29697D ] 1394ohci C:\Windows\system32\DRIVERS\1394ohci.sys
14:39:21.0482 3684 1394ohci - ok
14:39:21.0497 3684 [ F0E07D144C8685B8774BC32FC8DA4DF0 ] ACPI C:\Windows\system32\DRIVERS\ACPI.sys
14:39:21.0513 3684 ACPI - ok
14:39:21.0528 3684 [ 98D81CA942D19F7D9153B095162AC013 ] AcpiPmi C:\Windows\system32\DRIVERS\acpipmi.sys
14:39:21.0528 3684 AcpiPmi - ok
14:39:21.0575 3684 [ B362181ED3771DC03B4141927C80F801 ] AdobeARMservice C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
14:39:21.0575 3684 AdobeARMservice - ok
14:39:21.0606 3684 [ 21E785EBD7DC90A06391141AAC7892FB ] adp94xx C:\Windows\system32\DRIVERS\adp94xx.sys
14:39:21.0606 3684 adp94xx - ok
14:39:21.0622 3684 [ 0C676BC278D5B59FF5ABD57BBE9123F2 ] adpahci C:\Windows\system32\DRIVERS\adpahci.sys
14:39:21.0622 3684 adpahci - ok
14:39:21.0638 3684 [ 7C7B5EE4B7B822EC85321FE23A27DB33 ] adpu320 C:\Windows\system32\DRIVERS\adpu320.sys
14:39:21.0638 3684 adpu320 - ok
14:39:21.0669 3684 [ 8B5EEFEEC1E6D1A72A06C526628AD161 ] AeLookupSvc C:\Windows\System32\aelupsvc.dll
14:39:21.0669 3684 AeLookupSvc - ok
14:39:21.0684 3684 [ DDC040FDB01EF1712A6B13E52AFB104C ] AFD C:\Windows\system32\drivers\afd.sys
14:39:21.0684 3684 AFD - ok
14:39:21.0700 3684 [ 507812C3054C21CEF746B6EE3D04DD6E ] agp440 C:\Windows\system32\DRIVERS\agp440.sys
14:39:21.0700 3684 agp440 - ok
14:39:21.0731 3684 [ 8B30250D573A8F6B4BD23195160D8707 ] aic78xx C:\Windows\system32\DRIVERS\djsvs.sys
14:39:21.0731 3684 aic78xx - ok
14:39:21.0747 3684 [ 18A54E132947CD98FEA9ACCC57F98F13 ] ALG C:\Windows\System32\alg.exe
14:39:21.0747 3684 ALG - ok
14:39:21.0762 3684 [ 0D40BCF52EA90FC7DF2AEAB6503DEA44 ] aliide C:\Windows\system32\DRIVERS\aliide.sys
14:39:21.0762 3684 aliide - ok
14:39:21.0778 3684 [ 3C6600A0696E90A463771C7422E23AB5 ] amdagp C:\Windows\system32\DRIVERS\amdagp.sys
14:39:21.0778 3684 amdagp - ok
14:39:21.0794 3684 [ CD5914170297126B6266860198D1D4F0 ] amdide C:\Windows\system32\DRIVERS\amdide.sys
14:39:21.0794 3684 amdide - ok
14:39:21.0794 3684 [ 00DDA200D71BAC534BF56A9DB5DFD666 ] AmdK8 C:\Windows\system32\DRIVERS\amdk8.sys
14:39:21.0794 3684 AmdK8 - ok
14:39:21.0809 3684 [ 3CBF30F5370FDA40DD3E87DF38EA53B6 ] AmdPPM C:\Windows\system32\DRIVERS\amdppm.sys
14:39:21.0809 3684 AmdPPM - ok
14:39:21.0825 3684 [ 2101A86C25C154F8314B24EF49D7FBC2 ] amdsata C:\Windows\system32\DRIVERS\amdsata.sys
14:39:21.0825 3684 amdsata - ok
14:39:21.0840 3684 [ EA43AF0C423FF267355F74E7A53BDABA ] amdsbs C:\Windows\system32\DRIVERS\amdsbs.sys
14:39:21.0840 3684 amdsbs - ok
14:39:21.0856 3684 [ B81C2B5616F6420A9941EA093A92B150 ] amdxata C:\Windows\system32\DRIVERS\amdxata.sys
14:39:21.0856 3684 amdxata - ok
14:39:21.0872 3684 [ FEB834C02CE1E84B6A38F953CA067706 ] AppID C:\Windows\system32\drivers\appid.sys
14:39:21.0872 3684 AppID - ok
14:39:21.0887 3684 [ 62A9C86CB6085E20DB4823E4E97826F5 ] AppIDSvc C:\Windows\System32\appidsvc.dll
14:39:21.0887 3684 AppIDSvc - ok
14:39:21.0903 3684 [ 7DEAD9E3F65DCB2794F2711003BBF650 ] Appinfo C:\Windows\System32\appinfo.dll
14:39:21.0903 3684 Appinfo - ok
14:39:21.0918 3684 [ A45D184DF6A8803DA13A0B329517A64A ] AppMgmt C:\Windows\System32\appmgmts.dll
14:39:21.0918 3684 AppMgmt - ok
14:39:21.0918 3684 [ 2932004F49677BD84DBC72EDB754FFB3 ] arc C:\Windows\system32\DRIVERS\arc.sys
14:39:21.0918 3684 arc - ok
14:39:21.0934 3684 [ 5D6F36C46FD283AE1B57BD2E9FEB0BC7 ] arcsas C:\Windows\system32\DRIVERS\arcsas.sys
14:39:21.0934 3684 arcsas - ok
14:39:21.0996 3684 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
14:39:21.0996 3684 aspnet_state - ok
14:39:22.0012 3684 [ ADD2ADE1C2B285AB8378D2DAAF991481 ] AsyncMac C:\Windows\system32\DRIVERS\asyncmac.sys
14:39:22.0012 3684 AsyncMac - ok
14:39:22.0028 3684 [ 338C86357871C167A96AB976519BF59E ] atapi C:\Windows\system32\DRIVERS\atapi.sys
14:39:22.0028 3684 atapi - ok
14:39:22.0059 3684 [ 510C873BFA135AA829F4180352772734 ] AudioEndpointBuilder C:\Windows\System32\Audiosrv.dll
14:39:22.0059 3684 AudioEndpointBuilder - ok
14:39:22.0074 3684 [ 510C873BFA135AA829F4180352772734 ] Audiosrv C:\Windows\System32\Audiosrv.dll
14:39:22.0074 3684 Audiosrv - ok
14:39:22.0090 3684 [ DD6A431B43E34B91A767D1CE33728175 ] AxInstSV C:\Windows\System32\AxInstSV.dll
14:39:22.0090 3684 AxInstSV - ok
14:39:22.0121 3684 [ 1A231ABEC60FD316EC54C66715543CEC ] b06bdrv C:\Windows\system32\DRIVERS\bxvbdx.sys
14:39:22.0121 3684 b06bdrv - ok
14:39:22.0137 3684 [ BD8869EB9CDE6BBE4508D869929869EE ] b57nd60x C:\Windows\system32\DRIVERS\b57nd60x.sys
14:39:22.0137 3684 b57nd60x - ok
14:39:22.0168 3684 [ EE1E9C3BB8228AE423DD38DB69128E71 ] BDESVC C:\Windows\System32\bdesvc.dll
14:39:22.0168 3684 BDESVC - ok
14:39:22.0184 3684 [ 505506526A9D467307B3C393DEDAF858 ] Beep C:\Windows\system32\drivers\Beep.sys
14:39:22.0184 3684 Beep - ok
14:39:22.0199 3684 [ 85AC71C045CEB054ED48A7841AAE0C11 ] BFE C:\Windows\System32\bfe.dll
14:39:22.0199 3684 BFE - ok
14:39:22.0230 3684 [ 53F476476F55A27F580661BDE09C4EC4 ] BITS C:\Windows\System32\qmgr.dll
14:39:22.0246 3684 BITS - ok
14:39:22.0262 3684 [ 2287078ED48FCFC477B05B20CF38F36F ] blbdrive C:\Windows\system32\DRIVERS\blbdrive.sys
14:39:22.0262 3684 blbdrive - ok
14:39:22.0277 3684 [ FCAFAEF6798D7B51FF029F99A9898961 ] bowser C:\Windows\system32\DRIVERS\bowser.sys
14:39:22.0277 3684 bowser - ok
14:39:22.0293 3684 [ 9F9ACC7F7CCDE8A15C282D3F88B43309 ] BrFiltLo C:\Windows\system32\DRIVERS\BrFiltLo.sys
14:39:22.0293 3684 BrFiltLo - ok
14:39:22.0308 3684 [ 56801AD62213A41F6497F96DEE83755A ] BrFiltUp C:\Windows\system32\DRIVERS\BrFiltUp.sys
14:39:22.0308 3684 BrFiltUp - ok
14:39:22.0308 3684 [ 598E1280E7FF3744F4B8329366CC5635 ] Browser C:\Windows\System32\browser.dll
14:39:22.0308 3684 Browser - ok
14:39:22.0340 3684 [ 845B8CE732E67F3B4133164868C666EA ] Brserid C:\Windows\System32\Drivers\Brserid.sys
14:39:22.0340 3684 Brserid - ok
14:39:22.0355 3684 [ 203F0B1E73ADADBBB7B7B1FABD901F6B ] BrSerWdm C:\Windows\System32\Drivers\BrSerWdm.sys
14:39:22.0355 3684 BrSerWdm - ok
14:39:22.0355 3684 [ BD456606156BA17E60A04E18016AE54B ] BrUsbMdm C:\Windows\System32\Drivers\BrUsbMdm.sys
14:39:22.0355 3684 BrUsbMdm - ok
14:39:22.0371 3684 [ AF72ED54503F717A43268B3CC5FAEC2E ] BrUsbSer C:\Windows\System32\Drivers\BrUsbSer.sys
14:39:22.0371 3684 BrUsbSer - ok
14:39:22.0386 3684 [ ED3DF7C56CE0084EB2034432FC56565A ] BTHMODEM C:\Windows\system32\DRIVERS\bthmodem.sys
14:39:22.0386 3684 BTHMODEM - ok
14:39:22.0402 3684 [ 1DF19C96EEF6C29D1C3E1A8678E07190 ] bthserv C:\Windows\system32\bthserv.dll
14:39:22.0402 3684 bthserv - ok
14:39:22.0418 3684 [ 77EA11B065E0A8AB902D78145CA51E10 ] cdfs C:\Windows\system32\DRIVERS\cdfs.sys
14:39:22.0418 3684 cdfs - ok
14:39:22.0433 3684 [ BA6E70AA0E6091BC39DE29477D866A77 ] cdrom C:\Windows\system32\DRIVERS\cdrom.sys
14:39:22.0433 3684 cdrom - ok
14:39:22.0449 3684 [ 628A9E30EC5E18DD5DE6BE4DBDC12198 ] CertPropSvc C:\Windows\System32\certprop.dll
14:39:22.0449 3684 CertPropSvc - ok
14:39:22.0464 3684 [ 3FE3FE94A34DF6FB06E6418D0F6A0060 ] circlass C:\Windows\system32\DRIVERS\circlass.sys
14:39:22.0464 3684 circlass - ok
14:39:22.0480 3684 [ 635181E0E9BBF16871BF5380D71DB02D ] CLFS C:\Windows\system32\CLFS.sys
14:39:22.0480 3684 CLFS - ok
14:39:22.0527 3684 [ D88040F816FDA31C3B466F0FA0918F29 ] clr_optimization_v2.0.50727_32 C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
14:39:22.0527 3684 clr_optimization_v2.0.50727_32 - ok
14:39:22.0542 3684 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
14:39:22.0542 3684 clr_optimization_v4.0.30319_32 - ok
14:39:22.0558 3684 [ DEA805815E587DAD1DD2C502220B5616 ] CmBatt C:\Windows\system32\DRIVERS\CmBatt.sys
14:39:22.0574 3684 CmBatt - ok
14:39:22.0574 3684 [ C537B1DB64D495B9B4717B4D6D9EDBF2 ] cmdide C:\Windows\system32\DRIVERS\cmdide.sys
14:39:22.0574 3684 cmdide - ok
14:39:22.0589 3684 [ 1B675691ED940766149C93E8F4488D68 ] CNG C:\Windows\system32\Drivers\cng.sys
14:39:22.0605 3684 CNG - ok
14:39:22.0620 3684 [ A6023D3823C37043986713F118A89BEE ] Compbatt C:\Windows\system32\DRIVERS\compbatt.sys
14:39:22.0620 3684 Compbatt - ok
14:39:22.0636 3684 [ F1724BA27E97D627F808FB0BA77A28A6 ] CompositeBus C:\Windows\system32\DRIVERS\CompositeBus.sys
14:39:22.0636 3684 CompositeBus - ok
14:39:22.0636 3684 COMSysApp - ok
14:39:22.0652 3684 [ 2C4EBCFC84A9B44F209DFF6C6E6C61D1 ] crcdisk C:\Windows\system32\DRIVERS\crcdisk.sys
14:39:22.0652 3684 crcdisk - ok
14:39:22.0667 3684 [ 9C231178CE4FB385F4B54B0A9080B8A4 ] CryptSvc C:\Windows\system32\cryptsvc.dll
14:39:22.0683 3684 CryptSvc - ok
14:39:22.0698 3684 [ 27C9490BDD0AE48911AB8CF1932591ED ] CSC C:\Windows\system32\drivers\csc.sys
14:39:22.0698 3684 CSC - ok
14:39:22.0730 3684 [ 56FB5F222EA30D3D3FC459879772CB73 ] CscService C:\Windows\System32\cscsvc.dll
14:39:22.0730 3684 CscService - ok
14:39:22.0761 3684 [ B82CD39E336973359D7C9BF911E8E84F ] DcomLaunch C:\Windows\system32\rpcss.dll
14:39:22.0761 3684 DcomLaunch - ok
14:39:22.0776 3684 [ 8D6E10A2D9A5EED59562D9B82CF804E1 ] defragsvc C:\Windows\System32\defragsvc.dll
14:39:22.0776 3684 defragsvc - ok
14:39:22.0792 3684 [ 8E09E52EE2E3CEB199EF3DD99CF9E3FB ] DfsC C:\Windows\system32\Drivers\dfsc.sys
14:39:22.0792 3684 DfsC - ok
14:39:22.0823 3684 [ C56495FBD770712367CAD35E5DE72DA6 ] Dhcp C:\Windows\system32\dhcpcore.dll
14:39:22.0823 3684 Dhcp - ok
14:39:22.0823 3684 [ 1A050B0274BFB3890703D490F330C0DA ] discache C:\Windows\system32\drivers\discache.sys
14:39:22.0823 3684 discache - ok
14:39:22.0839 3684 [ 565003F326F99802E68CA78F2A68E9FF ] Disk C:\Windows\system32\DRIVERS\disk.sys
14:39:22.0839 3684 Disk - ok
14:39:22.0854 3684 [ D0722E963D3C6145446874241401B209 ] Dnscache C:\Windows\System32\dnsrslvr.dll
14:39:22.0854 3684 Dnscache - ok
14:39:22.0870 3684 [ 4408C85C21EEA48EB0CE486BAEEF0502 ] dot3svc C:\Windows\System32\dot3svc.dll
14:39:22.0870 3684 dot3svc - ok
14:39:22.0901 3684 [ B5E479EB83707DD698F66953E922042C ] Dot4 C:\Windows\system32\DRIVERS\Dot4.sys
14:39:22.0901 3684 Dot4 - ok
14:39:22.0917 3684 [ C25FEA07A8E7767E8B89AB96A3B96519 ] Dot4Print C:\Windows\system32\DRIVERS\Dot4Prt.sys
14:39:22.0917 3684 Dot4Print - ok
14:39:22.0932 3684 [ CF491FF38D62143203C065260567E2F7 ] dot4usb C:\Windows\system32\DRIVERS\dot4usb.sys
14:39:22.0932 3684 dot4usb - ok
14:39:22.0948 3684 [ 7FA81C6E11CAA594ADB52084DA73A1E5 ] DPS C:\Windows\system32\dps.dll
14:39:22.0948 3684 DPS - ok
14:39:22.0964 3684 [ B918E7C5F9BF77202F89E1A9539F2EB4 ] drmkaud C:\Windows\system32\drivers\drmkaud.sys
14:39:22.0964 3684 drmkaud - ok
14:39:22.0979 3684 [ 687AF6BB383885FF6A64071B189A7F3E ] dtsoftbus01 C:\Windows\system32\DRIVERS\dtsoftbus01.sys
14:39:22.0979 3684 dtsoftbus01 - ok
14:39:23.0010 3684 [ 39806CFEDDCC55E686A49BCCD2972F23 ] DXGKrnl C:\Windows\System32\drivers\dxgkrnl.sys
14:39:23.0010 3684 DXGKrnl - ok
14:39:23.0042 3684 [ 04238864710460C5682E260207D06192 ] eamonm C:\Windows\system32\DRIVERS\eamonm.sys
14:39:23.0042 3684 eamonm - ok
14:39:23.0057 3684 [ 8600142FA91C1B96367D3300AD0F3F3A ] EapHost C:\Windows\System32\eapsvc.dll
14:39:23.0057 3684 EapHost - ok
14:39:23.0120 3684 [ 024E1B5CAC09731E4D868E64DBFB4AB0 ] ebdrv C:\Windows\system32\DRIVERS\evbdx.sys
14:39:23.0135 3684 ebdrv - ok
14:39:23.0166 3684 [ F42309C4191C506B71DB5D1126D26318 ] EFS C:\Windows\System32\lsass.exe
14:39:23.0182 3684 EFS - ok
14:39:23.0229 3684 [ DEFF87F04AB5F6DD5EDF2B80853BBE10 ] ehdrv C:\Windows\system32\DRIVERS\ehdrv.sys
14:39:23.0229 3684 ehdrv - ok
14:39:23.0276 3684 [ 3A74A6E33685662B125A3269B1F2114F ] ehRecvr C:\Windows\ehome\ehRecvr.exe
14:39:23.0276 3684 ehRecvr - ok
14:39:23.0291 3684 [ D389BFF34F80CAEDE417BF9D1507996A ] ehSched C:\Windows\ehome\ehsched.exe
14:39:23.0291 3684 ehSched - ok
14:39:23.0322 3684 [ F0EEBAC2F362AA866188A1C0EF819CB9 ] ekrn C:\Program Files\ESET\ESET Smart Security\ekrn.exe
14:39:23.0322 3684 ekrn - ok
14:39:23.0354 3684 [ 0ED67910C8C326796FAA00B2BF6D9D3C ] elxstor C:\Windows\system32\DRIVERS\elxstor.sys
14:39:23.0354 3684 elxstor - ok
14:39:23.0369 3684 [ 5BA193CA0AE31209AAA39939CE6736B2 ] epfw C:\Windows\system32\DRIVERS\epfw.sys
14:39:23.0369 3684 epfw - ok
14:39:23.0385 3684 [ 9CEFD59C8E5EBFB48165AEF54617F539 ] EpfwLWF C:\Windows\system32\DRIVERS\EpfwLWF.sys
14:39:23.0385 3684 EpfwLWF - ok
14:39:23.0385 3684 [ 7144A06AC105A2A7302944602E415EC1 ] epfwwfp C:\Windows\system32\DRIVERS\epfwwfp.sys
14:39:23.0385 3684 epfwwfp - ok
14:39:23.0400 3684 [ 8FC3208352DD3912C94367A206AB3F11 ] ErrDev C:\Windows\system32\DRIVERS\errdev.sys
14:39:23.0416 3684 ErrDev - ok
14:39:23.0432 3684 [ F6916EFC29D9953D5D0DF06882AE8E16 ] EventSystem C:\Windows\system32\es.dll
14:39:23.0447 3684 EventSystem - ok
14:39:23.0463 3684 [ 2DC9108D74081149CC8B651D3A26207F ] exfat C:\Windows\system32\drivers\exfat.sys
14:39:23.0463 3684 exfat - ok
14:39:23.0478 3684 [ 7E0AB74553476622FB6AE36F73D97D35 ] fastfat C:\Windows\system32\drivers\fastfat.sys
14:39:23.0478 3684 fastfat - ok
14:39:23.0510 3684 [ F7EA23CC5E6BF2181F3F399D54F6EFC1 ] Fax C:\Windows\system32\fxssvc.exe
14:39:23.0525 3684 Fax - ok
14:39:23.0525 3684 [ E817A017F82DF2A1F8CFDBDA29388B29 ] fdc C:\Windows\system32\DRIVERS\fdc.sys
14:39:23.0525 3684 fdc - ok
14:39:23.0541 3684 [ F3222C893BD2F5821A0179E5C71E88FB ] fdPHost C:\Windows\system32\fdPHost.dll
14:39:23.0541 3684 fdPHost - ok
14:39:23.0556 3684 [ 7DBE8CBFE79EFBDEB98C9FB08D3A9A5B ] FDResPub C:\Windows\system32\fdrespub.dll
14:39:23.0556 3684 FDResPub - ok
14:39:23.0572 3684 [ 6CF00369C97F3CF563BE99BE983D13D8 ] FileInfo C:\Windows\system32\drivers\fileinfo.sys
14:39:23.0572 3684 FileInfo - ok
14:39:23.0588 3684 [ 42C51DC94C91DA21CB9196EB64C45DB9 ] Filetrace C:\Windows\system32\drivers\filetrace.sys
14:39:23.0588 3684 Filetrace - ok
14:39:23.0603 3684 [ 87907AA70CB3C56600F1C2FB8841579B ] flpydisk C:\Windows\system32\DRIVERS\flpydisk.sys
14:39:23.0603 3684 flpydisk - ok
14:39:23.0619 3684 [ 7520EC808E0C35E0EE6F841294316653 ] FltMgr C:\Windows\system32\drivers\fltmgr.sys
14:39:23.0619 3684 FltMgr - ok
14:39:23.0650 3684 [ B6512A85815FDC3D560C3705F5BDB93D ] FontCache C:\Windows\system32\FntCache.dll
14:39:23.0650 3684 FontCache - ok
14:39:23.0697 3684 [ E56F39F6B7FDA0AC77A79B0FD3DE1A2F ] FontCache3.0.0.0 C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
14:39:23.0697 3684 FontCache3.0.0.0 - ok
14:39:23.0712 3684 [ 1A16B57943853E598CFF37FE2B8CBF1D ] FsDepends C:\Windows\system32\drivers\FsDepends.sys
14:39:23.0712 3684 FsDepends - ok
14:39:23.0728 3684 [ A574B4360E438977038AAE4BF60D79A2 ] Fs_Rec C:\Windows\system32\drivers\Fs_Rec.sys
14:39:23.0728 3684 Fs_Rec - ok
14:39:23.0744 3684 [ 5592F5DBA26282D24D2B080EB438A4D7 ] fvevol C:\Windows\system32\DRIVERS\fvevol.sys
14:39:23.0744 3684 fvevol - ok
14:39:23.0759 3684 [ 65EE0C7A58B65E74AE05637418153938 ] gagp30kx C:\Windows\system32\DRIVERS\gagp30kx.sys
14:39:23.0759 3684 gagp30kx - ok
14:39:23.0790 3684 [ 8BA3C04702BF8F927AB36AE8313CA4EE ] gpsvc C:\Windows\System32\gpsvc.dll
14:39:23.0806 3684 gpsvc - ok
14:39:23.0853 3684 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdate C:\Program Files\Google\Update\GoogleUpdate.exe
14:39:23.0853 3684 gupdate - ok
14:39:23.0853 3684 [ 506708142BC63DABA64F2D3AD1DCD5BF ] gupdatem C:\Program Files\Google\Update\GoogleUpdate.exe
14:39:23.0853 3684 gupdatem - ok
14:39:23.0868 3684 [ C44E3C2BAB6837DB337DDEE7544736DB ] hcw85cir C:\Windows\system32\drivers\hcw85cir.sys
14:39:23.0868 3684 hcw85cir - ok
14:39:23.0900 3684 [ 3530CAD25DEBA7DC7DE8BB51632CBC5F ] HdAudAddService C:\Windows\system32\drivers\HdAudio.sys
14:39:23.0900 3684 HdAudAddService - ok
14:39:23.0915 3684 [ 717A2207FD6F13AD3E664C7D5A43C7BF ] HDAudBus C:\Windows\system32\DRIVERS\HDAudBus.sys
14:39:23.0915 3684 HDAudBus - ok
14:39:23.0931 3684 [ 1D58A7F3E11A9731D0EAAAA8405ACC36 ] HidBatt C:\Windows\system32\DRIVERS\HidBatt.sys
14:39:23.0931 3684 HidBatt - ok
14:39:23.0946 3684 [ 89448F40E6DF260C206A193A4683BA78 ] HidBth C:\Windows\system32\DRIVERS\hidbth.sys
14:39:23.0946 3684 HidBth - ok
14:39:23.0962 3684 [ CF50B4CF4A4F229B9F3C08351F99CA5E ] HidIr C:\Windows\system32\DRIVERS\hidir.sys
14:39:23.0962 3684 HidIr - ok
14:39:23.0978 3684 [ 2BC6F6A1992B3A77F5F41432CA6B3B6B ] hidserv C:\Windows\system32\hidserv.dll
14:39:23.0978 3684 hidserv - ok
14:39:23.0993 3684 [ 25072FB35AC90B25F9E4E3BACF774102 ] HidUsb C:\Windows\system32\DRIVERS\hidusb.sys
14:39:23.0993 3684 HidUsb - ok
14:39:24.0009 3684 [ 741C2A45CA8407E374AABA3E330B7872 ] hkmsvc C:\Windows\system32\kmsvc.dll
14:39:24.0009 3684 hkmsvc - ok
14:39:24.0024 3684 [ A768CA158BB06782A2835B907F4873C3 ] HomeGroupListener C:\Windows\system32\ListSvc.dll
14:39:24.0024 3684 HomeGroupListener - ok
14:39:24.0056 3684 [ FB08DEC5EF43D0C66D83B8E9694E7549 ] HomeGroupProvider C:\Windows\system32\provsvc.dll
14:39:24.0056 3684 HomeGroupProvider - ok
14:39:24.0071 3684 [ 86A41BAB21B31F8A1B8F5FB93106B63F ] hotcore3 C:\Windows\system32\DRIVERS\hotcore3.sys
14:39:24.0071 3684 hotcore3 - ok
14:39:24.0149 3684 [ 1DAE5C46D42B02A6D5862E1482EFB390 ] hpqcxs08 C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll
14:39:24.0149 3684 hpqcxs08 - ok
14:39:24.0165 3684 [ 99E8EEF42FE2F4AF29B08C3355DD7685 ] hpqddsvc C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll
14:39:24.0165 3684 hpqddsvc - ok
14:39:24.0180 3684 [ 295FDC419039090EB8B49FFDBB374549 ] HpSAMD C:\Windows\system32\DRIVERS\HpSAMD.sys
14:39:24.0180 3684 HpSAMD - ok
14:39:24.0212 3684 [ 79737E0F7D25DE8405CB34D4C9882253 ] HPSLPSVC C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL
14:39:24.0212 3684 HPSLPSVC - ok
14:39:24.0258 3684 [ C531C7FD9E8B62021112787C4E2C5A5A ] HTTP C:\Windows\system32\drivers\HTTP.sys
14:39:24.0258 3684 HTTP - ok
14:39:24.0274 3684 [ 8305F33CDE89AD6C7A0763ED0B5A8D42 ] hwpolicy C:\Windows\system32\drivers\hwpolicy.sys
14:39:24.0274 3684 hwpolicy - ok
14:39:24.0305 3684 [ F151F0BDC47F4A28B1B20A0818EA36D6 ] i8042prt C:\Windows\system32\DRIVERS\i8042prt.sys
14:39:24.0305 3684 i8042prt - ok
14:39:24.0321 3684 [ 934AF4D7C5F457B9F0743F4299B77B67 ] iaStorV C:\Windows\system32\DRIVERS\iaStorV.sys
14:39:24.0321 3684 iaStorV - ok
14:39:24.0352 3684 [ 5AF815EB5BC9802E5A064E2BA62BFC0C ] idsvc C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
14:39:24.0352 3684 idsvc - ok
14:39:24.0461 3684 [ C4097C4F60B7603B77E36715663D56EB ] igfx C:\Windows\system32\DRIVERS\igdkmd32.sys
14:39:24.0492 3684 igfx - ok
14:39:24.0508 3684 [ 4173FF5708F3236CF25195FECD742915 ] iirsp C:\Windows\system32\DRIVERS\iirsp.sys
14:39:24.0508 3684 iirsp - ok
14:39:24.0539 3684 [ FAC0EE6562B121B1399D6E855583F7A5 ] IKEEXT C:\Windows\System32\ikeext.dll
14:39:24.0555 3684 IKEEXT - ok
14:39:24.0602 3684 [ 15D839BB1BD1BDE95AAE98B10AD88D8C ] IntcAzAudAddService C:\Windows\system32\drivers\RTKVHDA.sys
14:39:24.0617 3684 IntcAzAudAddService - ok
14:39:24.0633 3684 [ A0F12F2C9BA6C72F3987CE780E77C130 ] intelide C:\Windows\system32\DRIVERS\intelide.sys
14:39:24.0633 3684 intelide - ok
14:39:24.0648 3684 [ 3B514D27BFC4ACCB4037BC6685F766E0 ] intelppm C:\Windows\system32\DRIVERS\intelppm.sys
14:39:24.0648 3684 intelppm - ok
14:39:24.0664 3684 [ ACB364B9075A45C0736E5C47BE5CAE19 ] IPBusEnum C:\Windows\system32\ipbusenum.dll
14:39:24.0664 3684 IPBusEnum - ok
14:39:24.0680 3684 [ 709D1761D3B19A932FF0238EA6D50200 ] IpFilterDriver C:\Windows\system32\DRIVERS\ipfltdrv.sys
14:39:24.0680 3684 IpFilterDriver - ok
14:39:24.0711 3684 [ 477397B432A256A50EE7E4339EB9EA14 ] iphlpsvc C:\Windows\System32\iphlpsvc.dll
14:39:24.0711 3684 iphlpsvc - ok
14:39:24.0726 3684 [ E4454B6C37D7FFD5649611F6496308A7 ] IPMIDRV C:\Windows\system32\DRIVERS\IPMIDrv.sys
14:39:24.0726 3684 IPMIDRV - ok
14:39:24.0742 3684 [ A5FA468D67ABCDAA36264E463A7BB0CD ] IPNAT C:\Windows\system32\drivers\ipnat.sys
14:39:24.0742 3684 IPNAT - ok
14:39:24.0758 3684 [ 42996CFF20A3084A56017B7902307E9F ] IRENUM C:\Windows\system32\drivers\irenum.sys
14:39:24.0758 3684 IRENUM - ok
14:39:24.0773 3684 [ 1F32BB6B38F62F7DF1A7AB7292638A35 ] isapnp C:\Windows\system32\DRIVERS\isapnp.sys
14:39:24.0773 3684 isapnp - ok
14:39:24.0789 3684 [ ED46C223AE46C6866AB77CDC41C404B7 ] iScsiPrt C:\Windows\system32\DRIVERS\msiscsi.sys
14:39:24.0789 3684 iScsiPrt - ok
14:39:24.0804 3684 [ ADEF52CA1AEAE82B50DF86B56413107E ] kbdclass C:\Windows\system32\DRIVERS\kbdclass.sys
14:39:24.0804 3684 kbdclass - ok
14:39:24.0820 3684 [ 3D9F0EBF350EDCFD6498057301455964 ] kbdhid C:\Windows\system32\DRIVERS\kbdhid.sys
14:39:24.0820 3684 kbdhid - ok
14:39:24.0820 3684 [ F42309C4191C506B71DB5D1126D26318 ] KeyIso C:\Windows\system32\lsass.exe
14:39:24.0820 3684 KeyIso - ok
14:39:24.0836 3684 [ E36A061EC11B373826905B21BE10948F ] KSecDD C:\Windows\system32\Drivers\ksecdd.sys
14:39:24.0836 3684 KSecDD - ok
14:39:24.0851 3684 [ 26C046977E85B95036453D7B88BA1820 ] KSecPkg C:\Windows\system32\Drivers\ksecpkg.sys
14:39:24.0851 3684 KSecPkg - ok
14:39:24.0882 3684 [ 89A7B9CC98D0D80C6F31B91C0A310FCD ] KtmRm C:\Windows\system32\msdtckrm.dll
14:39:24.0882 3684 KtmRm - ok
14:39:24.0898 3684 [ BCA92CB047A4326925ECEF759DBAA233 ] LanmanServer C:\Windows\system32\srvsvc.dll
14:39:24.0898 3684 LanmanServer - ok
14:39:24.0929 3684 [ B9891F885DCF1F0513A51CB58493CB1F ] LanmanWorkstation C:\Windows\System32\wkssvc.dll
14:39:24.0929 3684 LanmanWorkstation - ok
14:39:24.0945 3684 [ 170E7093A77AD586F3A012A3DB651D94 ] LGBusEnum C:\Windows\system32\drivers\LGBusEnum.sys
14:39:24.0945 3684 LGBusEnum - ok
14:39:24.0976 3684 [ 441669A8B37CF858AA91B0A5DFA4B721 ] LGSHidFilt C:\Windows\system32\DRIVERS\LGSHidFilt.Sys
14:39:24.0976 3684 LGSHidFilt - ok
14:39:25.0007 3684 [ D2DD04D1C8DF65EECD1F2C7FB947D43E ] LGVirHid C:\Windows\system32\drivers\LGVirHid.sys
14:39:25.0007 3684 LGVirHid - ok
14:39:25.0023 3684 [ F7611EC07349979DA9B0AE1F18CCC7A6 ] lltdio C:\Windows\system32\DRIVERS\lltdio.sys
14:39:25.0023 3684 lltdio - ok
14:39:25.0038 3684 [ 5700673E13A2117FA3B9020C852C01E2 ] lltdsvc C:\Windows\System32\lltdsvc.dll
14:39:25.0038 3684 lltdsvc - ok
14:39:25.0054 3684 [ 55CA01BA19D0006C8F2639B6C045E08B ] lmhosts C:\Windows\System32\lmhsvc.dll
14:39:25.0070 3684 lmhosts - ok
14:39:25.0085 3684 [ EB119A53CCF2ACC000AC71B065B78FEF ] LSI_FC C:\Windows\system32\DRIVERS\lsi_fc.sys
14:39:25.0085 3684 LSI_FC - ok
14:39:25.0101 3684 [ 8ADE1C877256A22E49B75D1CC9161F9C ] LSI_SAS C:\Windows\system32\DRIVERS\lsi_sas.sys
14:39:25.0116 3684 LSI_SAS - ok
14:39:25.0116 3684 [ DC9DC3D3DAA0E276FD2EC262E38B11E9 ] LSI_SAS2 C:\Windows\system32\DRIVERS\lsi_sas2.sys
14:39:25.0132 3684 LSI_SAS2 - ok
14:39:25.0148 3684 [ 0A036C7D7CAB643A7F07135AC47E0524 ] LSI_SCSI C:\Windows\system32\DRIVERS\lsi_scsi.sys
14:39:25.0148 3684 LSI_SCSI - ok
14:39:25.0148 3684 [ 6703E366CC18D3B6E534F5CF7DF39CEE ] luafv C:\Windows\system32\drivers\luafv.sys
14:39:25.0148 3684 luafv - ok
14:39:25.0179 3684 [ 0C6EA0109CFEDF441F06D031E9A8D1A9 ] MBAMProtector C:\Windows\system32\drivers\mbam.sys
14:39:25.0179 3684 MBAMProtector - ok
14:39:25.0226 3684 [ 0E08BDD7326E657D59DB40BAD23D8169 ] MBAMScheduler C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
14:39:25.0241 3684 MBAMScheduler - ok
14:39:25.0257 3684 [ A8E7F3DB083EB0839DFC1C763CDD2594 ] MBAMService C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
14:39:25.0257 3684 MBAMService - ok
14:39:25.0288 3684 [ E2B0887816ED336685954E3D8FDAA51D ] Mcx2Svc C:\Windows\system32\Mcx2Svc.dll
14:39:25.0288 3684 Mcx2Svc - ok
14:39:25.0304 3684 [ 0FFF5B045293002AB38EB1FD1FC2FB74 ] megasas C:\Windows\system32\DRIVERS\megasas.sys
14:39:25.0304 3684 megasas - ok
14:39:25.0304 3684 [ DCBAB2920C75F390CAF1D29F675D03D6 ] MegaSR C:\Windows\system32\DRIVERS\MegaSR.sys
14:39:25.0304 3684 MegaSR - ok
14:39:25.0319 3684 [ 146B6F43A673379A3C670E86D89BE5EA ] MMCSS C:\Windows\system32\mmcss.dll
14:39:25.0319 3684 MMCSS - ok
14:39:25.0335 3684 [ F001861E5700EE84E2D4E52C712F4964 ] Modem C:\Windows\system32\drivers\modem.sys
14:39:25.0335 3684 Modem - ok
14:39:25.0350 3684 [ 79D10964DE86B292320E9DFE02282A23 ] monitor C:\Windows\system32\DRIVERS\monitor.sys
14:39:25.0350 3684 monitor - ok
14:39:25.0366 3684 [ FB18CC1D4C2E716B6B903B0AC0CC0609 ] mouclass C:\Windows\system32\DRIVERS\mouclass.sys
14:39:25.0366 3684 mouclass - ok
14:39:25.0382 3684 [ 2C388D2CD01C9042596CF3C8F3C7B24D ] mouhid C:\Windows\system32\DRIVERS\mouhid.sys
14:39:25.0382 3684 mouhid - ok
14:39:25.0382 3684 [ 921C18727C5920D6C0300736646931C2 ] mountmgr C:\Windows\system32\drivers\mountmgr.sys
14:39:25.0397 3684 mountmgr - ok
14:39:25.0397 3684 [ 2AF5997438C55FB79D33D015C30E1974 ] mpio C:\Windows\system32\DRIVERS\mpio.sys
14:39:25.0397 3684 mpio - ok
14:39:25.0413 3684 [ AD2723A7B53DD1AACAE6AD8C0BFBF4D0 ] mpsdrv C:\Windows\system32\drivers\mpsdrv.sys
14:39:25.0413 3684 mpsdrv - ok
14:39:25.0428 3684 [ 5CD996CECF45CBC3E8D109C86B82D69E ] MpsSvc C:\Windows\system32\mpssvc.dll
14:39:25.0428 3684 MpsSvc - ok
14:39:25.0444 3684 [ B1BE47008D20E43DA3ADC37C24CDB89D ] MRxDAV C:\Windows\system32\drivers\mrxdav.sys
14:39:25.0444 3684 MRxDAV - ok
14:39:25.0475 3684 [ F4A054BE78AF7F410129C4B64B07DC9B ] mrxsmb C:\Windows\system32\DRIVERS\mrxsmb.sys
14:39:25.0475 3684 mrxsmb - ok
14:39:25.0506 3684 [ DEFFA295BD1895C6ED8E3078412AC60B ] mrxsmb10 C:\Windows\system32\DRIVERS\mrxsmb10.sys
14:39:25.0506 3684 mrxsmb10 - ok
14:39:25.0522 3684 [ 24D76ABE5DCAD22F19D105F76FDF0CE1 ] mrxsmb20 C:\Windows\system32\DRIVERS\mrxsmb20.sys
14:39:25.0522 3684 mrxsmb20 - ok
14:39:25.0538 3684 [ 4326D168944123F38DD3B2D9C37A0B12 ] msahci C:\Windows\system32\DRIVERS\msahci.sys
14:39:25.0538 3684 msahci - ok
14:39:25.0553 3684 [ 455029C7174A2DBB03DBA8A0D8BDDD9A ] msdsm C:\Windows\system32\DRIVERS\msdsm.sys
14:39:25.0553 3684 msdsm - ok
14:39:25.0569 3684 [ E1BCE74A3BD9902B72599C0192A07E27 ] MSDTC C:\Windows\System32\msdtc.exe
14:39:25.0569 3684 MSDTC - ok
14:39:25.0584 3684 [ DAEFB28E3AF5A76ABCC2C3078C07327F ] Msfs C:\Windows\system32\drivers\Msfs.sys
14:39:25.0584 3684 Msfs - ok
14:39:25.0616 3684 [ 3E1E5767043C5AF9367F0056295E9F84 ] mshidkmdf C:\Windows\System32\drivers\mshidkmdf.sys
14:39:25.0616 3684 mshidkmdf - ok
14:39:25.0631 3684 [ 0A4E5757AE09FA9622E3158CC1AEF114 ] msisadrv C:\Windows\system32\DRIVERS\msisadrv.sys
14:39:25.0631 3684 msisadrv - ok
14:39:25.0662 3684 [ 90F7D9E6B6F27E1A707D4A297F077828 ] MSiSCSI C:\Windows\system32\iscsiexe.dll
14:39:25.0662 3684 MSiSCSI - ok
14:39:25.0662 3684 msiserver - ok
14:39:25.0678 3684 [ 8C0860D6366AAFFB6C5BB9DF9448E631 ] MSKSSRV C:\Windows\system32\drivers\MSKSSRV.sys
14:39:25.0678 3684 MSKSSRV - ok
14:39:25.0678 3684 [ 3EA8B949F963562CEDBB549EAC0C11CE ] MSPCLOCK C:\Windows\system32\drivers\MSPCLOCK.sys
14:39:25.0694 3684 MSPCLOCK - ok
14:39:25.0694 3684 [ F456E973590D663B1073E9C463B40932 ] MSPQM C:\Windows\system32\drivers\MSPQM.sys
14:39:25.0694 3684 MSPQM - ok
14:39:25.0709 3684 [ 0E008FC4819D238C51D7C93E7B41E560 ] MsRPC C:\Windows\system32\drivers\MsRPC.sys
14:39:25.0709 3684 MsRPC - ok
14:39:25.0725 3684 [ FC6B9FF600CC585EA38B12589BD4E246 ] mssmbios C:\Windows\system32\DRIVERS\mssmbios.sys
14:39:25.0725 3684 mssmbios - ok
14:39:25.0740 3684 [ B42C6B921F61A6E55159B8BE6CD54A36 ] MSTEE C:\Windows\system32\drivers\MSTEE.sys
14:39:25.0740 3684 MSTEE - ok
14:39:25.0740 3684 [ 33599130F44E1F34631CEA241DE8AC84 ] MTConfig C:\Windows\system32\DRIVERS\MTConfig.sys
14:39:25.0740 3684 MTConfig - ok
14:39:25.0756 3684 [ 159FAD02F64E6381758C990F753BCC80 ] Mup C:\Windows\system32\Drivers\mup.sys
14:39:25.0756 3684 Mup - ok
14:39:25.0772 3684 [ 80284F1985C70C86F0B5F86DA2DFE1DF ] napagent C:\Windows\system32\qagentRT.dll
14:39:25.0787 3684 napagent - ok
14:39:25.0803 3684 [ 26384429FCD85D83746F63E798AB1480 ] NativeWifiP C:\Windows\system32\DRIVERS\nwifi.sys
14:39:25.0803 3684 NativeWifiP - ok
14:39:25.0818 3684 [ 23759D175A0A9BAAF04D05047BC135A8 ] NDIS C:\Windows\system32\drivers\ndis.sys
14:39:25.0818 3684 NDIS - ok
14:39:25.0834 3684 [ 0E1787AA6C9191D3D319E8BAFE86F80C ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
14:39:25.0834 3684 NdisCap - ok
14:39:25.0850 3684 [ E4A8AEC125A2E43A9E32AFEEA7C9C888 ] NdisTapi C:\Windows\system32\DRIVERS\ndistapi.sys
14:39:25.0850 3684 NdisTapi - ok
14:39:25.0865 3684 [ B30AE7F2B6D7E343B0DF32E6C08FCE75 ] Ndisuio C:\Windows\system32\DRIVERS\ndisuio.sys
14:39:25.0865 3684 Ndisuio - ok
14:39:25.0881 3684 [ 267C415EADCBE53C9CA873DEE39CF3A4 ] NdisWan C:\Windows\system32\DRIVERS\ndiswan.sys
14:39:25.0881 3684 NdisWan - ok
14:39:25.0896 3684 [ AF7E7C63DCEF3F8772726F86039D6EB4 ] NDProxy C:\Windows\system32\drivers\NDProxy.sys
14:39:25.0896 3684 NDProxy - ok
14:39:25.0928 3684 [ 510C138564486FF926A3F773205C63D1 ] Net Driver HPZ12 C:\Windows\system32\HPZinw12.dll
14:39:25.0928 3684 Net Driver HPZ12 - ok
14:39:25.0928 3684 [ 80B275B1CE3B0E79909DB7B39AF74D51 ] NetBIOS C:\Windows\system32\DRIVERS\netbios.sys
14:39:25.0928 3684 NetBIOS - ok
14:39:25.0943 3684 [ DD52A733BF4CA5AF84562A5E2F963B91 ] NetBT C:\Windows\system32\DRIVERS\netbt.sys
14:39:25.0943 3684 NetBT - ok
14:39:25.0959 3684 [ F42309C4191C506B71DB5D1126D26318 ] Netlogon C:\Windows\system32\lsass.exe
14:39:25.0959 3684 Netlogon - ok
14:39:25.0974 3684 [ 7CCCFCA7510684768DA22092D1FA4DB2 ] Netman C:\Windows\System32\netman.dll
14:39:25.0974 3684 Netman - ok
14:39:25.0990 3684 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetMsmqActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:25.0990 3684 NetMsmqActivator - ok
14:39:26.0006 3684 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetPipeActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:26.0006 3684 NetPipeActivator - ok
14:39:26.0037 3684 [ 8C338238C16777A802D6A9211EB2BA50 ] netprofm C:\Windows\System32\netprofm.dll
14:39:26.0037 3684 netprofm - ok
14:39:26.0037 3684 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpActivator C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:26.0037 3684 NetTcpActivator - ok
14:39:26.0052 3684 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
14:39:26.0052 3684 NetTcpPortSharing - ok
14:39:26.0068 3684 [ 1D85C4B390B0EE09C7A46B91EFB2C097 ] nfrd960 C:\Windows\system32\DRIVERS\nfrd960.sys
14:39:26.0068 3684 nfrd960 - ok
14:39:26.0084 3684 [ 2226496E34BD40734946A054B1CD657F ] NlaSvc C:\Windows\System32\nlasvc.dll
14:39:26.0084 3684 NlaSvc - ok
14:39:26.0099 3684 [ 1DB262A9F8C087E8153D89BEF3D2235F ] Npfs C:\Windows\system32\drivers\Npfs.sys
14:39:26.0099 3684 Npfs - ok
14:39:26.0115 3684 [ BA387E955E890C8A88306D9B8D06BF17 ] nsi C:\Windows\system32\nsisvc.dll
14:39:26.0115 3684 nsi - ok
14:39:26.0130 3684 [ E9A0A4D07E53D8FEA2BB8387A3293C58 ] nsiproxy C:\Windows\system32\drivers\nsiproxy.sys
14:39:26.0130 3684 nsiproxy - ok
14:39:26.0162 3684 [ 3795DCD21F740EE799FB7223234215AF ] Ntfs C:\Windows\system32\drivers\Ntfs.sys
14:39:26.0162 3684 Ntfs - ok
14:39:26.0177 3684 [ F9756A98D69098DCA8945D62858A812C ] Null C:\Windows\system32\drivers\Null.sys
14:39:26.0177 3684 Null - ok