1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Virus won't let me use search engine

Discussion in 'Virus & Other Malware Removal' started by fedupwithpopups, Jan 11, 2011.

Thread Status:
Not open for further replies.
  1. fedupwithpopups

    fedupwithpopups Thread Starter

    Joined:
    Oct 4, 2009
    Messages:
    4
    I apparently have the virus that sends you to other websites while using search. Thank you for any help!

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 2:21:20 PM, on 1/11/2011
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)
    Boot mode: Normal

    Running processes:
    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost.exe
    F:\Program Files\Windows Defender\MsMpEng.exe
    F:\WINDOWS\System32\svchost.exe
    F:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\Explorer.EXE
    F:\WINDOWS\system32\spoolsv.exe
    F:\Program Files\Google\Update\GoogleUpdate.exe
    F:\Program Files\Windows Defender\MSASCui.exe
    F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe
    F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    F:\Program Files\Alwil Software\Avast5\avastUI.exe
    F:\WINDOWS\system32\ctfmon.exe
    F:\WINDOWS\system32\HPZipm12.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\system32\wscntfy.exe
    F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    F:\WINDOWS\system32\notepad.exe
    F:\WINDOWS\system32\notepad.exe
    F:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://att.yahoo.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
    R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - F:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: Ipswitch.WsftpBrowserHelper - {601ED020-FB6C-11D3-87D8-0050DA59922B} - F:\Documents and Settings\Kale\My Documents\downloads\wsbho2k0.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - F:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [Windows Defender] "F:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "F:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [PowerMate] F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe
    O4 - HKLM\..\Run: [IgfxTray] F:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] F:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
    O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [avast5] "F:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
    O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Google Update] "F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1270674401953
    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O16 - DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} (Windows Live Hotmail Photo Upload Tool) - http://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - F:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - F:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - F:\WINDOWS\system32\browseui.dll
    O23 - Service: Apple Mobile Device - Apple Inc. - F:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - F:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - AVAST Software - F:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Inc. - F:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Pml Driver HPZ12 - HP - F:\WINDOWS\system32\HPZipm12.exe

    --
    End of file - 6034 bytes





    DDS (Ver_10-12-12.01) - NTFSx86
    Run by Kale at 14:15:13.51 on Tue 01/11/2011
    Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_18
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2047.1432 [GMT -8:00]

    AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

    ============== Running Processes ===============

    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost -k DcomLaunch
    svchost.exe
    F:\Program Files\Windows Defender\MsMpEng.exe
    F:\WINDOWS\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    F:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\Explorer.EXE
    F:\WINDOWS\system32\spoolsv.exe
    F:\Program Files\Google\Update\GoogleUpdate.exe
    F:\Program Files\Windows Defender\MSASCui.exe
    F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe
    F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    F:\Program Files\Alwil Software\Avast5\avastUI.exe
    F:\WINDOWS\system32\ctfmon.exe
    svchost.exe
    F:\WINDOWS\system32\HPZipm12.exe
    F:\WINDOWS\system32\svchost.exe -k imgsvc
    F:\WINDOWS\system32\wscntfy.exe
    F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    F:\WINDOWS\system32\msiexec.exe
    F:\Documents and Settings\Kale\My Documents\Downloads\dds.pif

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://att.yahoo.com/
    uInternet Settings,ProxyOverride = 127.0.0.1
    uURLSearchHooks: H - No File
    BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - f:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
    BHO: WsftpBrowserHelper Class: {601ed020-fb6c-11d3-87d8-0050da59922b} - f:\documents and settings\kale\my documents\downloads\wsbho2k0.dll
    BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - f:\program files\java\jre6\bin\jp2ssv.dll
    uRun: [ctfmon.exe] f:\windows\system32\ctfmon.exe
    uRun: [Google Update] "f:\documents and settings\kale\local settings\application data\google\update\GoogleUpdate.exe" /c
    mRun: [Windows Defender] "f:\program files\windows defender\MSASCui.exe" -hide
    mRun: [SunJavaUpdateSched] "f:\program files\common files\java\java update\jusched.exe"
    mRun: [PowerMate] f:\program files\griffin technology\powermate\PowerMate.exe
    mRun: [IgfxTray] f:\windows\system32\igfxtray.exe
    mRun: [HotKeysCmds] f:\windows\system32\hkcmd.exe
    mRun: [High Definition Audio Property Page Shortcut] HDAudPropShortcut.exe
    mRun: [ATIPTA] f:\program files\ati technologies\ati control panel\atiptaxx.exe
    mRun: [avast5] "f:\program files\alwil software\avast5\avastUI.exe" /nogui
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - f:\program files\messenger\msmsgs.exe
    DPF: Microsoft XML Parser for Java - file://f:\windows\java\classes\xmldso.cab
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
    DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1270674401953
    DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
    DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_09-windows-i586.cab
    DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    DPF: {E77F23EB-E7AB-4502-8F37-247DBAF1A147} - hxxp://gfx2.hotmail.com/mail/w4/pr01/photouploadcontrol/MSNPUpld.cab
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - f:\progra~1\common~1\skype\SKYPE4~1.DLL
    Notify: AtiExtEvent - Ati2evxx.dll
    Notify: igfxcui - igfxsrvc.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - f:\windows\system32\WPDShServiceObj.dll
    SEH: Microsoft AntiMalware ShellExecuteHook: {091eb208-39dd-417d-a5dd-7e2c2d8fb9cb} - f:\progra~1\window~4\MpShHook.dll
    LSA: Notification Packages = :\WINDOW

    ============= SERVICES / DRIVERS ===============

    R1 aswSP;aswSP;f:\windows\system32\drivers\aswSP.sys [2011-1-11 293968]
    R2 aswFsBlk;aswFsBlk;f:\windows\system32\drivers\aswFsBlk.sys [2011-1-11 17744]
    R2 avast! Antivirus;avast! Antivirus;f:\program files\alwil software\avast5\AvastSvc.exe [2011-1-11 40384]
    R2 WinDefend;Windows Defender;f:\program files\windows defender\MsMpEng.exe [2006-11-3 13592]
    S3 GAGPDrv;GAGPDrv; [x]
    S3 PowerMate;Griffin PowerMate Driver;f:\windows\system32\drivers\PowrMate.sys [2002-12-18 13184]
    S3 Razerlow;Razerlow USB Filter Driver;f:\windows\system32\drivers\Razerlow.sys [2006-4-30 13225]
    S4 gupdate;Google Update Service (gupdate);f:\program files\google\update\GoogleUpdate.exe [2010-8-1 136176]

    =============== Created Last 30 ================

    2011-01-11 22:14:36 -------- d--h--w- f:\windows\PIF
    2011-01-11 22:01:28 388096 ----a-r- f:\docume~1\kale\applic~1\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
    2011-01-11 22:01:27 -------- d-----w- f:\program files\Trend Micro
    2011-01-11 18:28:05 38848 ----a-w- f:\windows\avastSS.scr
    2011-01-11 18:27:59 -------- d-----w- f:\docume~1\alluse~1\applic~1\Alwil Software
    2011-01-11 03:44:43 -------- d-----w- f:\windows\system32\wbem\repository\FS
    2011-01-11 03:44:43 -------- d-----w- f:\windows\system32\wbem\Repository

    ==================== Find3M ====================

    2010-10-19 18:41:44 222080 ------w- f:\windows\system32\MpSigStub.exe
    2004-10-11 01:21:21 7568272 -c--a-w- f:\program files\san2004.SP2b-9133-Win32-G3N.exe

    ============= FINISH: 14:15:44.62 ===============





    GMER 1.0.15.15530 - http://www.gmer.net
    Rootkit scan 2011-01-11 15:25:51
    Windows 5.1.2600 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T1L0-e WDC_WD740GD-00FLA0 rev.21.08U21
    Running: y8huqwom.exe; Driver: F:\DOCUME~1\Kale\LOCALS~1\Temp\uwryqpog.sys


    ---- System - GMER 1.0.15 ----

    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwAllocateVirtualMemory [0xA9FB07D4]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwClose [0xA9FB771E]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateKey [0xA9FB75D6]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwDeleteKey [0xA9FB7BDC]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwDeleteValueKey [0xA9FB7AF2]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwDuplicateObject [0xA9FB71AA]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwFreeVirtualMemory [0xA9FB0884]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwOpenKey [0xA9FB76B2]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwOpenProcess [0xA9FB70E6]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwOpenThread [0xA9FB714C]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwProtectVirtualMemory [0xA9FB091C]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwQueryValueKey [0xA9FB77F6]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwRenameKey [0xA9FB7CAA]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwRestoreKey [0xA9FB77B4]
    SSDT \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwSetValueKey [0xA9FB7938]

    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateProcessEx [0xA9FC475E]
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwCreateSection [0xA9FC4582]
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ZwLoadDriver [0xA9FC46BC]
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) NtCreateSection
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObInsertObject
    Code \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software) ObMakeTemporaryObject

    ---- Kernel code sections - GMER 1.0.15 ----

    PAGE ntoskrnl.exe!ObInsertObject 8056CBBF 5 Bytes JMP A9FC1BB8 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
    PAGE ntoskrnl.exe!NtCreateSection 8056CE25 7 Bytes JMP A9FC4586 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
    PAGE ntoskrnl.exe!ZwCreateProcessEx 8058AB14 7 Bytes JMP A9FC4762 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
    PAGE ntoskrnl.exe!ObMakeTemporaryObject 805A802E 5 Bytes JMP A9FC011E \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
    PAGE ntoskrnl.exe!ZwLoadDriver 805B97B1 7 Bytes JMP A9FC46C0 \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)
    ? F:\DOCUME~1\Kale\LOCALS~1\Temp\mbr.sys The system cannot find the file specified. !

    ---- User code sections - GMER 1.0.15 ----

    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Google\Update\GoogleUpdate.exe[176] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[192] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MSASCui.exe[204] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Griffin Technology\PowerMate\PowerMate.exe[236] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\My Documents\Downloads\y8huqwom.exe[256] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\My Documents\Downloads\y8huqwom.exe[256] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\winlogon.exe[328] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\services.exe[416] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\lsass.exe[428] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[640] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\ctfmon.exe[648] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[680] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[700] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[764] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Windows Defender\MsMpEng.exe[860] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\svchost.exe[900] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1012] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[1024] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\NOTEPAD.EXE[1040] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1072] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\HPZipm12.exe[1184] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Program Files\Alwil Software\Avast5\AvastSvc.exe[1308] kernel32.dll!SetUnhandledExceptionFilter 7C84467D 4 Bytes [C2, 04, 00, 90] {RET 0x4; NOP }
    .text F:\WINDOWS\system32\svchost.exe[1484] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[1484] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\Ati2evxx.exe[1500] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] Explorer.EXE 01002742 2 Bytes [34, 15] {XOR AL, 0x15}
    .text F:\WINDOWS\Explorer.EXE[1616] Explorer.EXE 01002756 14 Bytes [8B, FF, 55, 8B, EC, 56, 57, ...]
    .text F:\WINDOWS\Explorer.EXE[1616] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] kernel32.dll!CreateProcessInternalW 7C819513 5 Bytes JMP 00937247
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\Explorer.EXE[1616] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\spoolsv.exe[1964] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\svchost.exe[2068] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[2296] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\System32\alg.exe[2760] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtCreateFile + 6 7C90D0B4 4 Bytes [28, 00, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtCreateFile + B 7C90D0B9 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtMapViewOfSection + 6 7C90D524 1 Byte [28]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtMapViewOfSection + 6 7C90D524 4 Bytes [28, 03, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtMapViewOfSection + B 7C90D529 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenFile + 6 7C90D5A4 4 Bytes [68, 00, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenFile + B 7C90D5A9 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenProcess + 6 7C90D604 4 Bytes [A8, 01, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenProcess + B 7C90D609 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenProcessToken + 6 7C90D614 4 Bytes CALL 7B90EC1A
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenProcessToken + B 7C90D619 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenProcessTokenEx + 6 7C90D624 4 Bytes [A8, 02, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenProcessTokenEx + B 7C90D629 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenThread + 6 7C90D664 4 Bytes [68, 01, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenThread + B 7C90D669 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenThreadToken + 6 7C90D674 4 Bytes [68, 02, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenThreadToken + B 7C90D679 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenThreadTokenEx + 6 7C90D684 4 Bytes CALL 7B90EC8B
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtOpenThreadTokenEx + B 7C90D689 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtQueryAttributesFile + 6 7C90D714 4 Bytes [A8, 00, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtQueryAttributesFile + B 7C90D719 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtQueryFullAttributesFile + 6 7C90D7B4 4 Bytes CALL 7B90EDB9
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtQueryFullAttributesFile + B 7C90D7B9 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtSetInformationFile + 6 7C90DC64 4 Bytes [28, 01, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtSetInformationFile + B 7C90DC69 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtSetInformationThread + 6 7C90DCB4 4 Bytes [28, 02, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtSetInformationThread + B 7C90DCB9 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 1 Byte [68]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtUnmapViewOfSection + 6 7C90DF14 4 Bytes [68, 03, 16, 00]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!NtUnmapViewOfSection + B 7C90DF19 1 Byte [E2]
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\Documents and Settings\Kale\Local Settings\Application Data\Google\Chrome\Application\chrome.exe[2932] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\wscntfy.exe[3156] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 64D06550 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 64D065B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!SetServiceObjectSecurity 77E36C29 5 Bytes JMP 64D09940 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!ChangeServiceConfigA 77E36D11 5 Bytes JMP 64D076E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!ChangeServiceConfigW 77E36EA9 5 Bytes JMP 64D07AD0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!ChangeServiceConfig2A 77E36FA9 5 Bytes JMP 64D07E90 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!ChangeServiceConfig2W 77E37031 5 Bytes JMP 64D07FC0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!CreateServiceA 77E370B9 5 Bytes JMP 64D06A40 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!CreateServiceW 77E37251 5 Bytes JMP 64D06EB0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] ADVAPI32.dll!DeleteService 77E37359 5 Bytes JMP 64D074E0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] USER32.dll!UnhookWindowsHookEx 7E41F21E 5 Bytes JMP 64D0B740 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] USER32.dll!SetWindowsHookExW 7E42DDB5 5 Bytes JMP 64D0B5C0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] USER32.dll!SetWindowsHookExA 7E4311D1 5 Bytes JMP 64D0B440 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] USER32.dll!SetWinEventHook 7E4317B7 5 Bytes JMP 64D0B1B0 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
    .text F:\WINDOWS\system32\notepad.exe[3696] USER32.dll!UnhookWinEvent 7E43186C 5 Bytes JMP 64D0B330 F:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)

    ---- Devices - GMER 1.0.15 ----

    Device \FileSystem\Ntfs \Ntfs aswSP.SYS (avast! self protection module/AVAST Software)

    AttachedDevice \FileSystem\Ntfs \Ntfs aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
    AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)

    ---- Registry - GMER 1.0.15 ----

    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\[email protected]:\Program Files\Nova Development\Art Explosion Publisher Pro\Templates\Calendars\Year on a Page\8\xbdx11 inch\Business Bank.npp 1
    Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\[email protected]:\Program Files\Nova Development\Art Explosion Publisher Pro\Templates\Calendars\Year on a Page\8\xbdx11 inch\Business.npp 1

    ---- EOF - GMER 1.0.15 ----
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/974109

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice