ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
ShimEng.dll (5CB70000 - 5CB96000)
AcGenral.DLL (6F880000 - 6FA4A000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
WINMM.dll (76B40000 - 76B6D000)
ole32.dll (774E0000 - 7761D000)
msvcrt.dll (77C10000 - 77C68000)
OLEAUT32.dll (77120000 - 771AB000)
MSACM32.dll (77BE0000 - 77BF5000)
VERSION.dll (77C00000 - 77C08000)
SHELL32.dll (7C9C0000 - 7D1D7000)
SHLWAPI.dll (77F60000 - 77FD6000)
USERENV.dll (769C0000 - 76A74000)
UxTheme.dll (5AD70000 - 5ADA8000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
NTMARTA.DLL (77690000 - 776B1000)
SAMLIB.dll (71BF0000 - 71C03000)
WLDAP32.dll (76F60000 - 76F8C000)
xpsp2res.dll (006E0000 - 009A5000)
webclnt.dll (5A6E0000 - 5A6F5000)
WININET.dll (3D930000 - 3DA01000)
Normaliz.dll (00670000 - 00679000)
iertutil.dll (3DFD0000 - 3E015000)
WS2_32.dll (71AB0000 - 71AC7000)
WS2HELP.dll (71AA0000 - 71AA8000)
rsaenh.dll (68000000 - 68036000)
PID 448 - C:\WINDOWS\system32\agrsmsvc.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
msvcrt.dll (77C10000 - 77C68000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
WINMM.dll (76B40000 - 76B6D000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
PID 460 - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
ACE.dll (10000000 - 100FA000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
WS2_32.dll (71AB0000 - 71AC7000)
msvcrt.dll (77C10000 - 77C68000)
WS2HELP.dll (71AA0000 - 71AA8000)
MSWSOCK.dll (71A50000 - 71A8F000)
NETAPI32.dll (5B860000 - 5B8B5000)
MSVCP71.dll (7C3A0000 - 7C41B000)
MSVCR71.dll (7C340000 - 7C396000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
locator.dll (00800000 - 00807000)
DNSAPI.dll (76F20000 - 76F47000)
winrnr.dll (76FB0000 - 76FB8000)
WLDAP32.dll (76F60000 - 76F8C000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
listor.dll (00920000 - 00935000)
ACEXML.dll (00940000 - 00958000)
ACEXML_Parser.dll (00960000 - 0096F000)
MPR.dll (71B20000 - 71B32000)
PID 496 - C:\Program Files\Java\jre6\bin\jqs.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
WS2_32.dll (71AB0000 - 71AC7000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
msvcrt.dll (77C10000 - 77C68000)
WS2HELP.dll (71AA0000 - 71AA8000)
ole32.dll (774E0000 - 7761D000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
MSVCR71.dll (7C340000 - 7C396000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
psapi.dll (76BF0000 - 76BFB000)
pdh.dll (74000000 - 74056000)
comdlg32.dll (763B0000 - 763F9000)
COMCTL32.dll (5D090000 - 5D12A000)
SHELL32.dll (7C9C0000 - 7D1D7000)
SHLWAPI.dll (77F60000 - 77FD6000)
CRYPT32.dll (77A80000 - 77B15000)
MSASN1.dll (77B20000 - 77B32000)
ODBC32.dll (74320000 - 7435D000)
odbcbcp.dll (711A0000 - 711A6000)
VERSION.dll (77C00000 - 77C08000)
OLEAUT32.dll (77120000 - 771AB000)
comctl32.dll (773D0000 - 774D3000)
odbcint.dll (006B0000 - 006C7000)
mswsock.dll (71A50000 - 71A8F000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
perfos.dll (5E760000 - 5E76A000)
perfdisk.dll (5E790000 - 5E799000)
PID 528 - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
LSSProxy.dll (67000000 - 67014000)
SHLWAPI.dll (77F60000 - 77FD6000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
msvcrt.dll (77C10000 - 77C68000)
PSAPI.DLL (76BF0000 - 76BFB000)
SHELL32.dll (7C9C0000 - 7D1D7000)
LSLog.dll (68000000 - 6800B000)
MSVCR80.dll (78130000 - 781CB000)
MSVCP80.dll (7C420000 - 7C4A7000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
PID 620 - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
WSOCK32.dll (71AD0000 - 71AD9000)
WS2_32.dll (71AB0000 - 71AC7000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
msvcrt.dll (77C10000 - 77C68000)
WS2HELP.dll (71AA0000 - 71AA8000)
MSVCP71.dll (7C3A0000 - 7C41B000)
MSVCR71.dll (7C340000 - 7C396000)
MFC71U.DLL (00510000 - 00612000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
SHLWAPI.dll (77F60000 - 77FD6000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
uxtheme.dll (5AD70000 - 5ADA8000)
BKaux.dll (10000000 - 1005E000)
Data32.dll (00C80000 - 00CAB000)
Cdrw32.dll (00CB0000 - 00CF0000)
WINMM.dll (76B40000 - 76B6D000)
CdrMmc32.dll (00CF0000 - 00D12000)
COMCTL32.dll (5D090000 - 5D12A000)
OLEACC.dll (74C80000 - 74CAC000)
MSVCP60.dll (76080000 - 760E5000)
WINSPOOL.DRV (73000000 - 73026000)
comdlg32.dll (763B0000 - 763F9000)
SHELL32.dll (7C9C0000 - 7D1D7000)
CdrwEx32.dll (00D20000 - 00D33000)
ImagFile.dll (003F0000 - 003F9000)
MPR.dll (71B20000 - 71B32000)
PSAPI.DLL (76BF0000 - 76BFB000)
comctl32.dll (773D0000 - 774D3000)
BKauxLOC.dll (00DA0000 - 00DA9000)
BKImage.dll (00E00000 - 00E51000)
Hddrw32.dll (00DB0000 - 00DC3000)
Scd32.dll (00DD0000 - 00DE2000)
BKImageLOC.dll (00E80000 - 00E89000)
mswsock.dll (71A50000 - 71A8F000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
PID 108 - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
MSVCP71.dll (7C3A0000 - 7C41B000)
MSVCR71.dll (7C340000 - 7C396000)
MFC71U.DLL (00420000 - 00522000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
SHLWAPI.dll (77F60000 - 77FD6000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
msvcrt.dll (77C10000 - 77C68000)
SHELL32.dll (7C9C0000 - 7D1D7000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
WS2_32.dll (71AB0000 - 71AC7000)
WS2HELP.dll (71AA0000 - 71AA8000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
SchedulerSvcLOC.dll (10000000 - 10005000)
mswsock.dll (71A50000 - 71A8F000)
DNSAPI.dll (76F20000 - 76F47000)
winrnr.dll (76FB0000 - 76FB8000)
WLDAP32.dll (76F60000 - 76F8C000)
rasadhlp.dll (76FC0000 - 76FC6000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
PID 776 - C:\WINDOWS\system32\nvsvc32.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
USERENV.dll (769C0000 - 76A74000)
msvcrt.dll (77C10000 - 77C68000)
POWRPROF.dll (74AD0000 - 74AD8000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
wtsapi32.dll (76F50000 - 76F58000)
WINSTA.dll (76360000 - 76370000)
NETAPI32.dll (5B860000 - 5B8B5000)
SHELL32.dll (7C9C0000 - 7D1D7000)
SHLWAPI.dll (77F60000 - 77FD6000)
ole32.dll (774E0000 - 7761D000)
COMCTL32.dll (5D090000 - 5D12A000)
OLEAUT32.dll (77120000 - 771AB000)
comctl32.dll (773D0000 - 774D3000)
nvapi.dll (00800000 - 0085B000)
SETUPAPI.dll (77920000 - 77A13000)
uxtheme.dll (5AD70000 - 5ADA8000)
msctfime.ime (755C0000 - 755EE000)
WINTRUST.dll (76C30000 - 76C5E000)
CRYPT32.dll (77A80000 - 77B15000)
MSASN1.dll (77B20000 - 77B32000)
IMAGEHLP.dll (76C90000 - 76CB8000)
msv1_0.dll (77C70000 - 77C95000)
cryptdll.dll (76790000 - 7679C000)
iphlpapi.dll (76D60000 - 76D79000)
WS2_32.dll (71AB0000 - 71AC7000)
WS2HELP.dll (71AA0000 - 71AA8000)
Apphelp.dll (77B40000 - 77B62000)
VERSION.dll (77C00000 - 77C08000)
NTMARTA.DLL (77690000 - 776B1000)
SAMLIB.dll (71BF0000 - 71C03000)
WLDAP32.dll (76F60000 - 76F8C000)
PID 840 - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
MSVCRT.dll (77C10000 - 77C68000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
SHELL32.dll (7C9C0000 - 7D1D7000)
SHLWAPI.dll (77F60000 - 77FD6000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
WINMM.dll (76B40000 - 76B6D000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
uxtheme.dll (5AD70000 - 5ADA8000)
xpsp2res.dll (00B00000 - 00DC5000)
CLBCATQ.DLL (76FD0000 - 7704F000)
COMRes.dll (77050000 - 77115000)
VERSION.dll (77C00000 - 77C08000)
PID 1584 - C:\WINDOWS\System32\alg.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
msvcrt.dll (77C10000 - 77C68000)
ATL.DLL (76B20000 - 76B31000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
WSOCK32.dll (71AD0000 - 71AD9000)
WS2_32.dll (71AB0000 - 71AC7000)
WS2HELP.dll (71AA0000 - 71AA8000)
MSWSOCK.DLL (71A50000 - 71A8F000)
ShimEng.dll (5CB70000 - 5CB96000)
AcGenral.DLL (6F880000 - 6FA4A000)
WINMM.dll (76B40000 - 76B6D000)
MSACM32.dll (77BE0000 - 77BF5000)
VERSION.dll (77C00000 - 77C08000)
SHELL32.dll (7C9C0000 - 7D1D7000)
SHLWAPI.dll (77F60000 - 77FD6000)
USERENV.dll (769C0000 - 76A74000)
UxTheme.dll (5AD70000 - 5ADA8000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
CLBCATQ.DLL (76FD0000 - 7704F000)
COMRes.dll (77050000 - 77115000)
xpsp2res.dll (006E0000 - 009A5000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
PID 2572 - C:\WINDOWS\system32\wuauclt.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
msvcrt.dll (77C10000 - 77C68000)
ole32.dll (774E0000 - 7761D000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
OLEAUT32.dll (77120000 - 771AB000)
SHLWAPI.dll (77F60000 - 77FD6000)
ShimEng.dll (5CB70000 - 5CB96000)
AcGenral.DLL (6F880000 - 6FA4A000)
WINMM.dll (76B40000 - 76B6D000)
MSACM32.dll (77BE0000 - 77BF5000)
VERSION.dll (77C00000 - 77C08000)
SHELL32.dll (7C9C0000 - 7D1D7000)
USERENV.dll (769C0000 - 76A74000)
UxTheme.dll (5AD70000 - 5ADA8000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
comctl32.dll (773D0000 - 774D3000)
wucltui.dll (507E0000 - 50832000)
MSIMG32.dll (76380000 - 76385000)
Cabinet.dll (75150000 - 75163000)
CRYPT32.dll (77A80000 - 77B15000)
MSASN1.dll (77B20000 - 77B32000)
WINTRUST.dll (76C30000 - 76C5E000)
IMAGEHLP.dll (76C90000 - 76CB8000)
MSCTF.dll (74720000 - 7476C000)
CLBCATQ.DLL (76FD0000 - 7704F000)
COMRes.dll (77050000 - 77115000)
xpsp2res.dll (00A80000 - 00D45000)
wups2.dll (50F00000 - 50F0D000)
PID 3044 - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
WSOCK32.dll (71AD0000 - 71AD9000)
WS2_32.dll (71AB0000 - 71AC7000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
msvcrt.dll (77C10000 - 77C68000)
WS2HELP.dll (71AA0000 - 71AA8000)
SETUPAPI.dll (77920000 - 77A13000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
WTSAPI32.dll (76F50000 - 76F58000)
WINSTA.dll (76360000 - 76370000)
NETAPI32.dll (5B860000 - 5B8B5000)
USERENV.dll (769C0000 - 76A74000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
NTMARTA.DLL (77690000 - 776B1000)
ole32.dll (774E0000 - 7761D000)
SAMLIB.dll (71BF0000 - 71C03000)
WLDAP32.dll (76F60000 - 76F8C000)
mswsock.dll (71A50000 - 71A8F000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
WINTRUST.dll (76C30000 - 76C5E000)
CRYPT32.dll (77A80000 - 77B15000)
MSASN1.dll (77B20000 - 77B32000)
IMAGEHLP.dll (76C90000 - 76CB8000)
PID 3924 - C:\Program Files\Bonjour\mDNSResponder.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
WS2_32.dll (71AB0000 - 71AC7000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
msvcrt.dll (77C10000 - 77C68000)
WS2HELP.dll (71AA0000 - 71AA8000)
IPHLPAPI.DLL (76D60000 - 76D79000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
rsaenh.dll (68000000 - 68036000)
SHELL32.dll (7C9C0000 - 7D1D7000)
SHLWAPI.dll (77F60000 - 77FD6000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
mswsock.dll (71A50000 - 71A8F000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
MPRAPI.dll (76D40000 - 76D58000)
ACTIVEDS.dll (77CC0000 - 77CF2000)
adsldpc.dll (76E10000 - 76E35000)
NETAPI32.dll (5B860000 - 5B8B5000)
WLDAP32.dll (76F60000 - 76F8C000)
ATL.DLL (76B20000 - 76B31000)
rtutils.dll (76E80000 - 76E8E000)
SAMLIB.dll (71BF0000 - 71C03000)
SETUPAPI.dll (77920000 - 77A13000)
uxtheme.dll (5AD70000 - 5ADA8000)
CLBCATQ.DLL (76FD0000 - 7704F000)
COMRes.dll (77050000 - 77115000)
VERSION.dll (77C00000 - 77C08000)
PID 1652 - C:\Program Files\iPod\bin\iPodService.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
CFGMGR32.dll (74AE0000 - 74AE7000)
setupapi.dll (77920000 - 77A13000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
msvcrt.dll (77C10000 - 77C68000)
VERSION.dll (77C00000 - 77C08000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
iPodServiceLocalized.DLL(10000000 - 1000E000)
iPodService.DLL (008B0000 - 008BE000)
xpsp2res.dll (00CE0000 - 00FA5000)
CLBCATQ.DLL (76FD0000 - 7704F000)
COMRes.dll (77050000 - 77115000)
uxtheme.dll (5AD70000 - 5ADA8000)
Wtsapi32.dll (76F50000 - 76F58000)
WINSTA.dll (76360000 - 76370000)
NETAPI32.dll (5B860000 - 5B8B5000)
WINTRUST.dll (76C30000 - 76C5E000)
CRYPT32.dll (77A80000 - 77B15000)
MSASN1.dll (77B20000 - 77B32000)
IMAGEHLP.dll (76C90000 - 76CB8000)
SXS.DLL (7E720000 - 7E7D0000)
rsaenh.dll (68000000 - 68036000)
userenv.dll (769C0000 - 76A74000)
Cabinet.dll (75150000 - 75163000)
SHLWAPI.dll (77F60000 - 77FD6000)
comctl32.dll (773D0000 - 774D3000)
comctl32.dll (5D090000 - 5D12A000)
PID 1496 - C:\Program Files\iTunes\iTunesHelper.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
USER32.dll (7E410000 - 7E4A1000)
GDI32.dll (77F10000 - 77F59000)
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
COMCTL32.dll (5D090000 - 5D12A000)
SHLWAPI.dll (77F60000 - 77FD6000)
msvcrt.dll (77C10000 - 77C68000)
IMM32.DLL (76390000 - 763AD000)
LPK.DLL (629C0000 - 629C9000)
USP10.dll (74D90000 - 74DFB000)
iTunesHelper.dll (10000000 - 10037000)
ole32.dll (774E0000 - 7761D000)
OLEAUT32.dll (77120000 - 771AB000)
CoreFoundation.dll (00910000 - 009DA000)
SHELL32.dll (7C9C0000 - 7D1D7000)
MSVCR80.dll (78130000 - 781CB000)
WS2_32.dll (71AB0000 - 71AC7000)
WS2HELP.dll (71AA0000 - 71AA8000)
pthreadVC2.dll (003D0000 - 003E0000)
WSOCK32.dll (71AD0000 - 71AD9000)
objc.dll (003E0000 - 003FC000)
MSVCP80.dll (7C420000 - 7C4A7000)
icuin40.dll (009F0000 - 00AED000)
icuuc40.dll (00B00000 - 00BE1000)
icudt40.dll (4AD00000 - 4BA5B000)
ASL.dll (00C00000 - 00C0D000)
VERSION.dll (77C00000 - 77C08000)
SETUPAPI.dll (77920000 - 77A13000)
WININET.dll (3D930000 - 3DA01000)
Normaliz.dll (00C20000 - 00C29000)
iertutil.dll (3DFD0000 - 3E015000)
comctl32.dll (773D0000 - 774D3000)
uxtheme.dll (5AD70000 - 5ADA8000)
MSCTF.dll (74720000 - 7476C000)
iTunesHelperLocalized.DLL(01280000 - 0128E000)
iTunesHelper.DLL (012B0000 - 012BE000)
msctfime.ime (755C0000 - 755EE000)
WINTRUST.dll (76C30000 - 76C5E000)
CRYPT32.dll (77A80000 - 77B15000)
MSASN1.dll (77B20000 - 77B32000)
IMAGEHLP.dll (76C90000 - 76CB8000)
QuickTime.qts (66800000 - 673AB000)
QTCF.dll (68A40000 - 68A6E000)
WINMM.dll (76B40000 - 76B6D000)
comdlg32.dll (763B0000 - 763F9000)
gdiplus.dll (4EC50000 - 4EDFB000)
DSOUND.dll (73F10000 - 73F6C000)
CFNetwork.DLL (01820000 - 018B3000)
SQLite3.dll (018C0000 - 01923000)
zlib1.dll (01940000 - 01953000)
iphlpapi.dll (76D60000 - 76D79000)
ddraw.dll (73760000 - 737AB000)
DCIMAN32.dll (73BC0000 - 73BC6000)
iTunesMobileDevice.dll(01B80000 - 01CCF000)
mswsock.dll (71A50000 - 71A8F000)
hnetcfg.dll (662B0000 - 66308000)
wshtcpip.dll (71A90000 - 71A98000)
Wtsapi32.dll (76F50000 - 76F58000)
WINSTA.dll (76360000 - 76370000)
NETAPI32.dll (5B860000 - 5B8B5000)
CLBCATQ.DLL (76FD0000 - 7704F000)
COMRes.dll (77050000 - 77115000)
xpsp2res.dll (02000000 - 022C5000)
SXS.DLL (7E720000 - 7E7D0000)
PID 1268 - C:\Program Files\internet explorer\iexplore.exe
-------------------------------------------------------------------------------
ntdll.dll (7C900000 - 7C9B2000)
kernel32.dll (7C800000 - 7C8F6000)
iexplore.exe:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\AppPatch\AcLayers.DLL:
Base address: 71590000
Size: 00079000
Flags: 80084004
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5906
Company: Microsoft Corporation
File Version: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)
Description: Windows Compatibility DLL
Location: C:\WINDOWS\AppPatch\AcLayers.DLL
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
iexplore.exe:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\AppPatch\AcLayers.DLL:
Base address: 71590000
Size: 00079000
Flags: 80084004
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5906
Company: Microsoft Corporation
File Version: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)
Description: Windows Compatibility DLL
Location: C:\WINDOWS\AppPatch\AcLayers.DLL
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
iexplore.exe:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\AppPatch\AcLayers.DLL:
Base address: 71590000
Size: 00079000
Flags: 80084004
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5906
Company: Microsoft Corporation
File Version: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)
Description: Windows Compatibility DLL
Location: C:\WINDOWS\AppPatch\AcLayers.DLL
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
iexplore.exe:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\system32\ShimEng.dll:
Base address: 5CB70000
Size: 00026000
Flags: 8000400C
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5512
Company: Microsoft Corporation
File Version: 5.1.2600.5512 (xpsp.080413-2105)
Description: Shim Engine DLL
Location: C:\WINDOWS\system32\ShimEng.dll
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ADVAPI32.dll:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\AppPatch\AcLayers.DLL:
Base address: 71590000
Size: 00079000
Flags: 80084004
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5906
Company: Microsoft Corporation
File Version: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)
Description: Windows Compatibility DLL
Location: C:\WINDOWS\AppPatch\AcLayers.DLL
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ADVAPI32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\AppPatch\AcLayers.DLL:
Base address: 71590000
Size: 00079000
Flags: 80084004
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5906
Company: Microsoft Corporation
File Version: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)
Description: Windows Compatibility DLL
Location: C:\WINDOWS\AppPatch\AcLayers.DLL
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ADVAPI32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\AppPatch\AcLayers.DLL:
Base address: 71590000
Size: 00079000
Flags: 80084004
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5906
Company: Microsoft Corporation
File Version: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)
Description: Windows Compatibility DLL
Location: C:\WINDOWS\AppPatch\AcLayers.DLL
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ADVAPI32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
Information about C:\WINDOWS\system32\ShimEng.dll:
Base address: 5CB70000
Size: 00026000
Flags: 8000400C
Load count: 1
Name: Microsoft
Windows
Operating System
Prod. Version: 5.1.2600.5512
Company: Microsoft Corporation
File Version: 5.1.2600.5512 (xpsp.080413-2105)
Description: Shim Engine DLL
Location: C:\WINDOWS\system32\ShimEng.dll
Signed: YES
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
RPCRT4.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
RPCRT4.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
RPCRT4.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
Secur32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
Secur32.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
Secur32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
GDI32.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
GDI32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
GDI32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
GDI32.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
USER32.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
USER32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
USER32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
USER32.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
msvcrt.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
msvcrt.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
SHLWAPI.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
SHLWAPI.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
SHLWAPI.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
SHLWAPI.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
SHLWAPI.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
SHELL32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
SHELL32.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
SHELL32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
SHELL32.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
SHELL32.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
ole32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
ole32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ole32.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
ole32.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
ole32.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
urlmon.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
urlmon.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
urlmon.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
urlmon.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
urlmon.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
OLEAUT32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
OLEAUT32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
OLEAUT32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
iertutil.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
iertutil.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
iertutil.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
VERSION.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
VERSION.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
VERSION.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
USERENV.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
USERENV.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
USERENV.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
USERENV.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINSPOOL.DRV:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
WINSPOOL.DRV:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINSPOOL.DRV:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
WINSPOOL.DRV:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
IMM32.DLL :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
IMM32.DLL :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
USP10.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
USP10.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
comctl32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
comctl32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
comctl32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
comctl32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
comctl32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
comctl32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
IEFRAME.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
IEFRAME.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
IEFRAME.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
IEFRAME.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
PSAPI.DLL :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
PSAPI.DLL :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
UxTheme.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
UxTheme.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
UxTheme.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
MSCTF.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSCTF.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSCTF.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
MSCTF.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
apphelp.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
apphelp.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
apphelp.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
msctfime.ime:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
msctfime.ime:LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
msctfime.ime:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
msctfime.ime:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
IEUI.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
IEUI.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
gdiplus.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
gdiplus.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
gdiplus.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
CLBCATQ.DLL :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
CLBCATQ.DLL :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
CLBCATQ.DLL :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
msimtf.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
msimtf.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
cscui.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
cscui.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
cscui.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
CSCDLL.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
CSCDLL.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
CSCDLL.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
SETUPAPI.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
SETUPAPI.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
SETUPAPI.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
msohevi.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
msohevi.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
msohevi.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSVCR80.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
MSVCR80.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSVCR80.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
SXS.DLL :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
SXS.DLL :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
SXS.DLL :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
SXS.DLL :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
WININET.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
WININET.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
WININET.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
WININET.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
MLANG.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
MLANG.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
MLANG.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ws2_32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
ws2_32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
WS2HELP.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
WS2HELP.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
AcroIEHelperSLoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
AcroIEHelperSGetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
AcroIEHelperSLoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
AcroIEHelper.LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
AcroIEHelper.LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
AcroIEHelper.GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
jp2ssv.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
jp2ssv.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
jp2ssv.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSVCR71.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
MSVCR71.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
jqs_plugin.dlLoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
jqs_plugin.dlLoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
jqs_plugin.dlGetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
mswsock.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
mswsock.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
mswsock.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
hnetcfg.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
hnetcfg.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
hnetcfg.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
hnetcfg.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
RASAPI32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
RASAPI32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
RASAPI32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
rasman.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
rasman.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
rasman.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
NETAPI32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
NETAPI32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
NETAPI32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
TAPI32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
TAPI32.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
rtutils.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
rtutils.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINMM.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINMM.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
WINMM.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
WINMM.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
msv1_0.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
msv1_0.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
msv1_0.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
iphlpapi.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
iphlpapi.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
actxprxy.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
actxprxy.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
rasadhlp.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
rasadhlp.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
DNSAPI.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
DNSAPI.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
DNSAPI.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
WLDAP32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
WLDAP32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
mdnsNSP.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
mdnsNSP.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtml.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtml.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
mshtml.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtml.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtml.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ieapfltr.dll:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
ieapfltr.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
ieapfltr.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ieapfltr.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINTRUST.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
WINTRUST.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINTRUST.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
CRYPT32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
CRYPT32.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
CRYPT32.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
CRYPT32.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
MSASN1.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSASN1.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
IMAGEHLP.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
IMAGEHLP.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
NTMARTA.DLL :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
NTMARTA.DLL :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
jscript.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
jscript.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
jscript.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtmled.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtmled.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
mshtmled.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
mshtmled.dll:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
Flash10e.ocx:LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
Flash10e.ocx:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
Flash10e.ocx:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
COMDLG32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
COMDLG32.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
COMDLG32.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
mscms.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
mscms.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
wdmaud.drv :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
wdmaud.drv :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSACM32.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
vbscript.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
vbscript.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
vbscript.dll:LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
vbscript.dll:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
schannel.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
schannel.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
schannel.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ddrawex.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ddrawex.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
DDRAW.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
DDRAW.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
DCIMAN32.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
iepeers.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
iepeers.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
iepeers.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
iepeers.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
iepeers.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
rsaenh.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
rsaenh.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
rsaenh.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
dssenh.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
dssenh.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
dssenh.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
cryptnet.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
cryptnet.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
cryptnet.dll:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
cryptnet.dll:LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
WINHTTP.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
WINHTTP.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
WINHTTP.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
msxml3.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
msxml3.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
msxml3.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
msxml3.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
Dxtrans.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
Dxtrans.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
ATL.DLL :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
ATL.DLL :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
ATL.DLL :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
ATL.DLL :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
Dxtmsft.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
MSRATING.dll:LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
MSRATING.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
MSRATING.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
MSRATING.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
ntshrui.dll :LoadLibraryExA --[HOOKED]-- @715B9F5D by C:\WINDOWS\AppPatch\AcLayers.DLL
ntshrui.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
ntshrui.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
LINKINFO.dll:GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
LINKINFO.dll:LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
LINKINFO.dll:LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
wuapi.dll :LoadLibraryW --[HOOKED]-- @715BA067 by C:\WINDOWS\AppPatch\AcLayers.DLL
wuapi.dll :GetProcAddress --[HOOKED]-- @5CB77774 by C:\WINDOWS\system32\ShimEng.dll
wuapi.dll :LoadLibraryExW --[HOOKED]-- @715BA16B by C:\WINDOWS\AppPatch\AcLayers.DLL
wuapi.dll :LoadLibraryA --[HOOKED]-- @715B9E59 by C:\WINDOWS\AppPatch\AcLayers.DLL
ADVAPI32.dll (77DD0000 - 77E6B000)
RPCRT4.dll (77E70000 - 77F02000)
Secur32.dll (77FE0000 - 77FF1000)
GDI32.dll (77F10000 - 77F59000)
USER32.dll (7E410000 - 7E4A1000)
The code of DialogBoxIndirectParamA at 7E456D7D (0) got patched. Here is the diff:
Address New-Original
7E456D7D: E9 - 8B
7E456D7F: B2 - 55
7E456D80: EF - 8B
7E456D81: BF - EC
--> JMP DWORD PTR DS:[3E352081]
Patched by C:\WINDOWS\system32\IEFRAME.dll!URLQualifyW+0xC1C700B0
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::