GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2011-03-10 11:30:59
Windows 6.0.6002 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 SAMSUNG_HD502IJ rev.1AA01112
Running: gmer.exe; Driver: C:\Users\Milan\AppData\Local\Temp\aglcypow.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwAdjustPrivilegesToken [0x90CD9C14]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwAlpcConnectPort [0x90CDB1C4]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwAlpcCreatePort [0x90CD9E00]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwConnectPort [0x90CD8F40]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwCreateFile [0x90CD987A]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwCreatePort [0x90CD8E1C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwCreateSection [0x90CD9626]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwCreateSymbolicLinkObject [0x90CDAE54]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwCreateThread [0x90CD8808]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwLoadDriver [0x90CDA864]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwMakeTemporaryObject [0x90CD9208]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwOpenFile [0x90CD9A56]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwOpenSection [0x90CD94AC]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwRequestWaitReplyPort [0x90CDA2FC]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwSecureConnectPort [0x90CDA5B0]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwSetSystemInformation [0x90CDAB5C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwShutdownSystem [0x90CD9172]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwSystemDebugControl [0x90CD9398]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwTerminateProcess [0x90CD8C1E]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwTerminateThread [0x90CD8A0C]
SSDT            \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO)                                           ZwCreateThreadEx [0x90CD9F10]

INT 0x52        ?                                                                                                                                    88086F00
INT 0x62        ?                                                                                                                                    88086F00
INT 0x72        ?                                                                                                                                    88086F00
INT 0x72        ?                                                                                                                                    88086F00
INT 0x72        ?                                                                                                                                    88086F00
INT 0x72        ?                                                                                                                                    88086F00
INT 0x82        ?                                                                                                                                    88086F00
INT 0x92        ?                                                                                                                                    8655EBF8
INT 0x92        ?                                                                                                                                    8655EBF8
INT 0x92        ?                                                                                                                                    8655EBF8
INT 0x92        ?                                                                                                                                    8655EBF8
INT 0x92        ?                                                                                                                                    8655EBF8
INT 0xB2        ?                                                                                                                                    8655DBF8
INT 0xB2        ?                                                                                                                                    88086F00
INT 0xB2        ?                                                                                                                                    8655DBF8

---- Kernel code sections - GMER 1.0.15 ----

.text           ntkrnlpa.exe!KeSetEvent + 119                                                                                                        834FB89C 4 Bytes  [14, 9C, CD, 90] {ADC AL, 0x9c; INT 0x90}
.text           ntkrnlpa.exe!KeSetEvent + 13D                                                                                                        834FB8C0 8 Bytes  [C4, B1, CD, 90, 00, 9E, CD, ...] {LES ESI, DWORD [ECX-0x61ff6f33]; INT 0x90}
.text           ntkrnlpa.exe!KeSetEvent + 1C1                                                                                                        834FB944 4 Bytes  [40, 8F, CD, 90]
.text           ntkrnlpa.exe!KeSetEvent + 1D9                                                                                                        834FB95C 4 Bytes  [7A, 98, CD, 90] {JP 0xffffffffffffff9a; INT 0x90}
.text           ntkrnlpa.exe!KeSetEvent + 205                                                                                                        834FB988 4 Bytes  [1C, 8E, CD, 90] {SBB AL, 0x8e; INT 0x90}
.text           ...                                                                                                                                  
?               System32\Drivers\splj.sys                                                                                                            Systm neme nalzt uvedenou cestu. !
PAGE            ataport.SYS!DllUnload                                                                                                                83A9BB2E 5 Bytes  JMP 8655E1D8 
.text           C:\Windows\system32\DRIVERS\atikmdag.sys                                                                                             section is writeable [0x8FE0A000, 0x352E10, 0xE8000020]
.text           USBPORT.SYS!DllUnload                                                                                                                841A441B 5 Bytes  JMP 880864E0 
.text           ay1kq56c.SYS                                                                                                                         83B7B000 22 Bytes  [82, 33, 42, 83, 6C, 32, 42, ...]
.text           ay1kq56c.SYS                                                                                                                         83B7B017 84 Bytes  [00, 32, 37, 79, 80, 3D, 35, ...]
.text           ay1kq56c.SYS                                                                                                                         83B7B06C 52 Bytes  [A0, 5E, 49, 83, 98, 5E, 4F, ...]
.text           ay1kq56c.SYS                                                                                                                         83B7B0A1 43 Bytes  [80, 4F, 83, 74, 76, 49, 83, ...]
.text           ay1kq56c.SYS                                                                                                                         83B7B0CE 10 Bytes  [00, 00, 00, 00, 00, 00, C9, ...] {ADD [EAX], AL; ADD [EAX], AL; ADD [EAX], AL; LEAVE ; HLT ; POP ESP; DEC EDX}
.text           ...                                                                                                                                  
PAGE            spsys.sys!?SPVersion@@3PADA + 1ABF                                                                                                   9FE5003F 91 Bytes  [8B, FF, 55, 8B, EC, 8B, 45, ...]
PAGE            spsys.sys!?SPVersion@@3PADA + 1B1B                                                                                                   9FE5009B 18 Bytes  [9F, 85, C9, 7C, 18, 8D, 41, ...]
PAGE            spsys.sys!?SPVersion@@3PADA + 1B2F                                                                                                   9FE500AF 1 Byte  [16]
PAGE            spsys.sys!?SPVersion@@3PADA + 1B2F                                                                                                   9FE500AF 128 Bytes  [16, 3B, C8, 75, E2, B0, 01, ...]
PAGE            spsys.sys!?SPVersion@@3PADA + 1BB0                                                                                                   9FE50130 6 Bytes  [0E, 83, 78, 14, 01, 75]
PAGE            ...                                                                                                                                  

---- User code sections - GMER 1.0.15 ----

.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!LdrLoadDll                                                                            771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!LdrUnloadDll                                                                          771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!LdrGetProcedureAddress                                                                771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtAllocateVirtualMemory                                                               77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtClose                                                                               77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtCreateFile                                                                          77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtCreateProcess                                                                       772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtCreateProcessEx                                                                     772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtDeleteFile                                                                          77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtFreeVirtualMemory                                                                   77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtLoadDriver                                                                          772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtOpenFile                                                                            77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtProtectVirtualMemory                                                                77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtSetInformationProcess                                                               77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtUnloadDriver                                                                        772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!NtWriteVirtualMemory                                                                  772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ntdll.dll!RtlAllocateHeap                                                                       772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CreateProcessW                                                                     76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CreateProcessA                                                                     76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!VirtualProtect                                                                     76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!OpenFile                                                                           7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!MoveFileW                                                                          7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CopyFileExW                                                                        76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CopyFileW                                                                          76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!DeleteFileW                                                                        7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!DeleteFileA                                                                        7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!MoveFileWithProgressW                                                              769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!MoveFileExW                                                                        769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!LoadLibraryExW                                                                     76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!LoadLibraryW                                                                       76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!LoadLibraryExA                                                                     769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!LoadLibraryA                                                                       769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!GetProcAddress                                                                     7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!GetModuleHandleA                                                                   769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!GetModuleHandleW                                                                   7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CreateFileW                                                                        7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CreateFileA                                                                        7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!MoveFileExA                                                                        76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!MoveFileWithProgressA                                                              76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CopyFileA                                                                          76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!MoveFileA                                                                          7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!CopyFileExA                                                                        769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!WinExec                                                                            769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] kernel32.dll!LoadModule                                                                         769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ADVAPI32.dll!CreateProcessAsUserA                                                               76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ADVAPI32.dll!CreateProcessAsUserW                                                               76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ADVAPI32.dll!OpenServiceA                                                                       76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ADVAPI32.dll!OpenServiceW                                                                       76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ADVAPI32.dll!CreateServiceW                                                                     76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] ADVAPI32.dll!CreateServiceA                                                                     76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[352] USER32.dll!EndTask                                                                              773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!LdrLoadDll                                                                 771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!LdrUnloadDll                                                               771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!LdrGetProcedureAddress                                                     771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtAllocateVirtualMemory                                                    77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtClose                                                                    77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtCreateFile                                                               77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtCreateProcess                                                            772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtCreateProcessEx                                                          772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtDeleteFile                                                               77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtFreeVirtualMemory                                                        77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtLoadDriver                                                               772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtOpenFile                                                                 77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtProtectVirtualMemory                                                     77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtSetInformationProcess                                                    77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtUnloadDriver                                                             772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!NtWriteVirtualMemory                                                       772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ntdll.dll!RtlAllocateHeap                                                            772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CreateProcessW                                                          76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CreateProcessA                                                          76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!VirtualProtect                                                          76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!OpenFile                                                                7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!MoveFileW                                                               7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CopyFileExW                                                             76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CopyFileW                                                               76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!DeleteFileW                                                             7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!DeleteFileA                                                             7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!MoveFileWithProgressW                                                   769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!MoveFileExW                                                             769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!LoadLibraryExW                                                          76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!LoadLibraryW                                                            76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!LoadLibraryExA                                                          769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!LoadLibraryA                                                            769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!GetProcAddress                                                          7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!GetModuleHandleA                                                        769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!GetModuleHandleW                                                        7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CreateFileW                                                             7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CreateFileA                                                             7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!MoveFileExA                                                             76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!MoveFileWithProgressA                                                   76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CopyFileA                                                               76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!MoveFileA                                                               7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!CopyFileExA                                                             769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!WinExec                                                                 769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] kernel32.dll!LoadModule                                                              769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ADVAPI32.dll!CreateProcessAsUserA                                                    76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ADVAPI32.dll!CreateProcessAsUserW                                                    76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ADVAPI32.dll!OpenServiceA                                                            76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ADVAPI32.dll!OpenServiceW                                                            76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ADVAPI32.dll!CreateServiceW                                                          76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] ADVAPI32.dll!CreateServiceA                                                          76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] SHELL32.dll!ShellExecuteW                                                            75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] SHELL32.dll!ShellExecuteExW                                                          758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] SHELL32.dll!ShellExecuteEx                                                           75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] SHELL32.dll!ShellExecuteA                                                            75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\CDBurnerXP\NMSAccessU.exe[604] USER32.dll!EndTask                                                                   773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!LdrLoadDll                                                                            771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!LdrUnloadDll                                                                          771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!LdrGetProcedureAddress                                                                771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtAllocateVirtualMemory                                                               77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtClose                                                                               77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtCreateFile                                                                          77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtCreateProcess                                                                       772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtCreateProcessEx                                                                     772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtDeleteFile                                                                          77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtFreeVirtualMemory                                                                   77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtLoadDriver                                                                          772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtOpenFile                                                                            77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtProtectVirtualMemory                                                                77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtSetInformationProcess                                                               77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtUnloadDriver                                                                        772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!NtWriteVirtualMemory                                                                  772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ntdll.dll!RtlAllocateHeap                                                                       772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CreateProcessW                                                                     76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CreateProcessA                                                                     76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!VirtualProtect                                                                     76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!OpenFile                                                                           7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!MoveFileW                                                                          7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CopyFileExW                                                                        76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CopyFileW                                                                          76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!DeleteFileW                                                                        7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!DeleteFileA                                                                        7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!MoveFileWithProgressW                                                              769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!MoveFileExW                                                                        769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!LoadLibraryExW                                                                     76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!LoadLibraryW                                                                       76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!LoadLibraryExA                                                                     769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!LoadLibraryA                                                                       769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!GetProcAddress                                                                     7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!GetModuleHandleA                                                                   769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!GetModuleHandleW                                                                   7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CreateFileW                                                                        7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CreateFileA                                                                        7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!MoveFileExA                                                                        76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!MoveFileWithProgressA                                                              76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CopyFileA                                                                          76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!MoveFileA                                                                          7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!CopyFileExA                                                                        769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!WinExec                                                                            769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] kernel32.dll!LoadModule                                                                         769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ADVAPI32.dll!CreateProcessAsUserA                                                               76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ADVAPI32.dll!CreateProcessAsUserW                                                               76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ADVAPI32.dll!OpenServiceA                                                                       76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ADVAPI32.dll!OpenServiceW                                                                       76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ADVAPI32.dll!CreateServiceW                                                                     76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] ADVAPI32.dll!CreateServiceA                                                                     76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] USER32.dll!EndTask                                                                              773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] WS2_32.dll!WSASocketW                                                                           758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wininit.exe[696] WS2_32.dll!WSASocketA                                                                           75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\services.exe[740] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!LdrLoadDll                                                                              771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!LdrUnloadDll                                                                            771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!LdrGetProcedureAddress                                                                  771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtAllocateVirtualMemory                                                                 77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtClose                                                                                 77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtCreateFile                                                                            77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtCreateProcess                                                                         772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtCreateProcessEx                                                                       772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtDeleteFile                                                                            77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtFreeVirtualMemory                                                                     77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtLoadDriver                                                                            772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtOpenFile                                                                              77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtProtectVirtualMemory                                                                  77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtSetInformationProcess                                                                 77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtUnloadDriver                                                                          772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!NtWriteVirtualMemory                                                                    772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ntdll.dll!RtlAllocateHeap                                                                         772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CreateProcessW                                                                       76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CreateProcessA                                                                       76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!VirtualProtect                                                                       76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!OpenFile                                                                             7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!MoveFileW                                                                            7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CopyFileExW                                                                          76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CopyFileW                                                                            76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!DeleteFileW                                                                          7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!DeleteFileA                                                                          7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!MoveFileWithProgressW                                                                769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!MoveFileExW                                                                          769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!LoadLibraryExW                                                                       76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!LoadLibraryW                                                                         76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!LoadLibraryExA                                                                       769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!LoadLibraryA                                                                         769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!GetProcAddress                                                                       7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!GetModuleHandleA                                                                     769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!GetModuleHandleW                                                                     7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CreateFileW                                                                          7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CreateFileA                                                                          7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!MoveFileExA                                                                          76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!MoveFileWithProgressA                                                                76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CopyFileA                                                                            76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!MoveFileA                                                                            7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!CopyFileExA                                                                          769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!WinExec                                                                              769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] kernel32.dll!LoadModule                                                                           769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ADVAPI32.dll!CreateProcessAsUserA                                                                 76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ADVAPI32.dll!CreateProcessAsUserW                                                                 76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ADVAPI32.dll!OpenServiceA                                                                         76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ADVAPI32.dll!OpenServiceW                                                                         76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ADVAPI32.dll!CreateServiceW                                                                       76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] ADVAPI32.dll!CreateServiceA                                                                       76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] USER32.dll!EndTask                                                                                773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] WS2_32.dll!WSASocketW                                                                             758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsass.exe[772] WS2_32.dll!WSASocketA                                                                             75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!LdrLoadDll                                                                                771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!LdrUnloadDll                                                                              771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!LdrGetProcedureAddress                                                                    771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtAllocateVirtualMemory                                                                   77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtClose                                                                                   77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtCreateFile                                                                              77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtCreateProcess                                                                           772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtCreateProcessEx                                                                         772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtDeleteFile                                                                              77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtFreeVirtualMemory                                                                       77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtLoadDriver                                                                              772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtOpenFile                                                                                77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtProtectVirtualMemory                                                                    77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtSetInformationProcess                                                                   77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtUnloadDriver                                                                            772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!NtWriteVirtualMemory                                                                      772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ntdll.dll!RtlAllocateHeap                                                                           772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CreateProcessW                                                                         76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CreateProcessA                                                                         76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!VirtualProtect                                                                         76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!OpenFile                                                                               7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!MoveFileW                                                                              7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CopyFileExW                                                                            76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CopyFileW                                                                              76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!DeleteFileW                                                                            7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!DeleteFileA                                                                            7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!MoveFileWithProgressW                                                                  769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!MoveFileExW                                                                            769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!LoadLibraryExW                                                                         76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!LoadLibraryW                                                                           76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!LoadLibraryExA                                                                         769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!LoadLibraryA                                                                           769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!GetProcAddress                                                                         7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!GetModuleHandleA                                                                       769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!GetModuleHandleW                                                                       7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CreateFileW                                                                            7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CreateFileA                                                                            7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!MoveFileExA                                                                            76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!MoveFileWithProgressA                                                                  76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CopyFileA                                                                              76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!MoveFileA                                                                              7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!CopyFileExA                                                                            769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!WinExec                                                                                769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] kernel32.dll!LoadModule                                                                             769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ADVAPI32.dll!CreateProcessAsUserA                                                                   76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ADVAPI32.dll!CreateProcessAsUserW                                                                   76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ADVAPI32.dll!OpenServiceA                                                                           76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ADVAPI32.dll!OpenServiceW                                                                           76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ADVAPI32.dll!CreateServiceW                                                                         76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] ADVAPI32.dll!CreateServiceA                                                                         76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\lsm.exe[784] USER32.dll!EndTask                                                                                  773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!LdrLoadDll                                                                            771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!LdrUnloadDll                                                                          771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!LdrGetProcedureAddress                                                                771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtAllocateVirtualMemory                                                               77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtClose                                                                               77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtCreateFile                                                                          77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtCreateProcess                                                                       772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtCreateProcessEx                                                                     772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtDeleteFile                                                                          77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtFreeVirtualMemory                                                                   77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtLoadDriver                                                                          772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtOpenFile                                                                            77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtProtectVirtualMemory                                                                77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtSetInformationProcess                                                               77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtUnloadDriver                                                                        772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!NtWriteVirtualMemory                                                                  772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ntdll.dll!RtlAllocateHeap                                                                       772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CreateProcessW                                                                     76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CreateProcessA                                                                     76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!VirtualProtect                                                                     76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!OpenFile                                                                           7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!MoveFileW                                                                          7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CopyFileExW                                                                        76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CopyFileW                                                                          76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!DeleteFileW                                                                        7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!DeleteFileA                                                                        7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!MoveFileWithProgressW                                                              769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!MoveFileExW                                                                        769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!LoadLibraryExW                                                                     76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!LoadLibraryW                                                                       76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!LoadLibraryExA                                                                     769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!LoadLibraryA                                                                       769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!GetProcAddress                                                                     7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!GetModuleHandleA                                                                   769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!GetModuleHandleW                                                                   7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CreateFileW                                                                        7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CreateFileA                                                                        7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!MoveFileExA                                                                        76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!MoveFileWithProgressA                                                              76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CopyFileA                                                                          76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!MoveFileA                                                                          7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!CopyFileExA                                                                        769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!WinExec                                                                            769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] kernel32.dll!LoadModule                                                                         769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ADVAPI32.dll!CreateProcessAsUserA                                                               76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ADVAPI32.dll!CreateProcessAsUserW                                                               76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ADVAPI32.dll!OpenServiceA                                                                       76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ADVAPI32.dll!OpenServiceW                                                                       76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ADVAPI32.dll!CreateServiceW                                                                     76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] ADVAPI32.dll!CreateServiceA                                                                     76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[960] USER32.dll!EndTask                                                                              773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1028] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1068] ntdll.dll!NtAllocateVirtualMemory                                77203F84 5 Bytes  JMP 0050ED30 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text           C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1068] ntdll.dll!NtCreateFile                                           77204224 5 Bytes  JMP 005266C0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1196] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!LdrLoadDll                                        771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!LdrUnloadDll                                      771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!LdrGetProcedureAddress                            771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtAllocateVirtualMemory                           77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtClose                                           77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtCreateFile                                      77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtCreateProcess                                   772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtCreateProcessEx                                 772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtDeleteFile                                      77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtFreeVirtualMemory                               77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtLoadDriver                                      772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtOpenFile                                        77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtProtectVirtualMemory                            77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtSetInformationProcess                           77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtUnloadDriver                                    772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!NtWriteVirtualMemory                              772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ntdll.dll!RtlAllocateHeap                                   772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CreateProcessW                                 76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CreateProcessA                                 76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!VirtualProtect                                 76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!OpenFile                                       7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!MoveFileW                                      7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CopyFileExW                                    76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CopyFileW                                      76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!DeleteFileW                                    7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!DeleteFileA                                    7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!MoveFileWithProgressW                          769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!MoveFileExW                                    769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!LoadLibraryExW                                 76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!LoadLibraryW                                   76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!LoadLibraryExA                                 769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!LoadLibraryA                                   769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!GetProcAddress                                 7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!GetModuleHandleA                               769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!GetModuleHandleW                               7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CreateFileW                                    7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CreateFileA                                    7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!MoveFileExA                                    76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!MoveFileWithProgressA                          76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CopyFileA                                      76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!MoveFileA                                      7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!CopyFileExA                                    769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!WinExec                                        769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] kernel32.dll!LoadModule                                     769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] USER32.dll!EndTask                                          773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ADVAPI32.dll!CreateProcessAsUserA                           76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ADVAPI32.dll!CreateProcessAsUserW                           76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ADVAPI32.dll!OpenServiceA                                   76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ADVAPI32.dll!OpenServiceW                                   76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ADVAPI32.dll!CreateServiceW                                 76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ADVAPI32.dll!CreateServiceA                                 76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ole32.dll!CoGetClassObject                                  76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] ole32.dll!CoCreateInstanceEx                                76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] SHELL32.dll!ShellExecuteW                                   75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] SHELL32.dll!ShellExecuteExW                                 758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] SHELL32.dll!ShellExecuteEx                                  75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe[1208] SHELL32.dll!ShellExecuteA                                   75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!LdrLoadDll                                                                     771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!LdrUnloadDll                                                                   771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!LdrGetProcedureAddress                                                         771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtAllocateVirtualMemory                                                        77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtClose                                                                        77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtCreateFile                                                                   77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtCreateProcess                                                                772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtCreateProcessEx                                                              772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtDeleteFile                                                                   77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtFreeVirtualMemory                                                            77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtLoadDriver                                                                   772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtOpenFile                                                                     77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtProtectVirtualMemory                                                         77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtSetInformationProcess                                                        77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtUnloadDriver                                                                 772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!NtWriteVirtualMemory                                                           772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ntdll.dll!RtlAllocateHeap                                                                772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CreateProcessW                                                              76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CreateProcessA                                                              76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!VirtualProtect                                                              76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!OpenFile                                                                    7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!MoveFileW                                                                   7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CopyFileExW                                                                 76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CopyFileW                                                                   76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!DeleteFileW                                                                 7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!DeleteFileA                                                                 7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!MoveFileWithProgressW                                                       769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!MoveFileExW                                                                 769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!LoadLibraryExW                                                              76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!LoadLibraryW                                                                76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!LoadLibraryExA                                                              769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!LoadLibraryA                                                                769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!GetProcAddress                                                              7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!GetModuleHandleA                                                            769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!GetModuleHandleW                                                            7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CreateFileW                                                                 7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CreateFileA                                                                 7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!MoveFileExA                                                                 76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!MoveFileWithProgressA                                                       76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CopyFileA                                                                   76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!MoveFileA                                                                   7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!CopyFileExA                                                                 769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!WinExec                                                                     769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] kernel32.dll!LoadModule                                                                  769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ADVAPI32.dll!CreateProcessAsUserA                                                        76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ADVAPI32.dll!CreateProcessAsUserW                                                        76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ADVAPI32.dll!OpenServiceA                                                                76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ADVAPI32.dll!OpenServiceW                                                                76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ADVAPI32.dll!CreateServiceW                                                              76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ADVAPI32.dll!CreateServiceA                                                              76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] USER32.dll!EndTask                                                                       773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ole32.dll!CoGetClassObject                                                               76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] ole32.dll!CoCreateInstanceEx                                                             76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] WS2_32.dll!WSASocketW                                                                    758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[1300] WS2_32.dll!WSASocketA                                                                    75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!LdrLoadDll                                                                          771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!LdrUnloadDll                                                                        771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!LdrGetProcedureAddress                                                              771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtAllocateVirtualMemory                                                             77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtClose                                                                             77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtCreateFile                                                                        77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtCreateProcess                                                                     772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtCreateProcessEx                                                                   772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtDeleteFile                                                                        77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtFreeVirtualMemory                                                                 77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtLoadDriver                                                                        772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtOpenFile                                                                          77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtProtectVirtualMemory                                                              77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtSetInformationProcess                                                             77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtUnloadDriver                                                                      772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!NtWriteVirtualMemory                                                                772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ntdll.dll!RtlAllocateHeap                                                                     772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CreateProcessW                                                                   76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CreateProcessA                                                                   76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!VirtualProtect                                                                   76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!OpenFile                                                                         7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!MoveFileW                                                                        7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CopyFileExW                                                                      76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CopyFileW                                                                        76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!DeleteFileW                                                                      7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!DeleteFileA                                                                      7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!MoveFileWithProgressW                                                            769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!MoveFileExW                                                                      769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!LoadLibraryExW                                                                   76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!LoadLibraryW                                                                     76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!LoadLibraryExA                                                                   769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!LoadLibraryA                                                                     769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!GetProcAddress                                                                   7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!GetModuleHandleA                                                                 769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!GetModuleHandleW                                                                 7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CreateFileW                                                                      7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CreateFileA                                                                      7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!MoveFileExA                                                                      76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!MoveFileWithProgressA                                                            76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CopyFileA                                                                        76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!MoveFileA                                                                        7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!CopyFileExA                                                                      769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!WinExec                                                                          769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] kernel32.dll!LoadModule                                                                       769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] USER32.dll!EndTask                                                                            773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ADVAPI32.dll!CreateProcessAsUserA                                                             76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ADVAPI32.dll!CreateProcessAsUserW                                                             76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ADVAPI32.dll!OpenServiceA                                                                     76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ADVAPI32.dll!OpenServiceW                                                                     76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ADVAPI32.dll!CreateServiceW                                                                   76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atiesrxx.exe[1304] ADVAPI32.dll!CreateServiceA                                                                   76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] WS2_32.dll!WSASocketW                                                                          758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] WS2_32.dll!WSASocketA                                                                          75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] shell32.dll!ShellExecuteW                                                                      75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] shell32.dll!ShellExecuteExW                                                                    758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] shell32.dll!ShellExecuteEx                                                                     75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1384] shell32.dll!ShellExecuteA                                                                      75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[1412] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1432] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ole32.dll!CoGetClassObject                                                                     76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] ole32.dll!CoCreateInstanceEx                                                                   76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\AUDIODG.EXE[1508] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1532] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!LdrLoadDll                                                                 771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!LdrUnloadDll                                                               771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!LdrGetProcedureAddress                                                     771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtAllocateVirtualMemory                                                    77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtClose                                                                    77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtCreateFile                                                               77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtCreateProcess                                                            772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtCreateProcessEx                                                          772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtDeleteFile                                                               77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtFreeVirtualMemory                                                        77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtLoadDriver                                                               772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtOpenFile                                                                 77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtProtectVirtualMemory                                                     77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtSetInformationProcess                                                    77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtUnloadDriver                                                             772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!NtWriteVirtualMemory                                                       772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ntdll.dll!RtlAllocateHeap                                                            772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CreateProcessW                                                          76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CreateProcessA                                                          76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!VirtualProtect                                                          76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!OpenFile                                                                7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!MoveFileW                                                               7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CopyFileExW                                                             76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CopyFileW                                                               76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!DeleteFileW                                                             7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!DeleteFileA                                                             7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!MoveFileWithProgressW                                                   769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!MoveFileExW                                                             769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!LoadLibraryExW                                                          76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!LoadLibraryW                                                            76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!LoadLibraryExA                                                          769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!LoadLibraryA                                                            769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!GetProcAddress                                                          7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!GetModuleHandleA                                                        769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!GetModuleHandleW                                                        7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CreateFileW                                                             7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CreateFileA                                                             7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!MoveFileExA                                                             76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!MoveFileWithProgressA                                                   76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CopyFileA                                                               76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!MoveFileA                                                               7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!CopyFileExA                                                             769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!WinExec                                                                 769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] kernel32.dll!LoadModule                                                              769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ADVAPI32.dll!CreateProcessAsUserA                                                    76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ADVAPI32.dll!CreateProcessAsUserW                                                    76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ADVAPI32.dll!OpenServiceA                                                            76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ADVAPI32.dll!OpenServiceW                                                            76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ADVAPI32.dll!CreateServiceW                                                          76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ADVAPI32.dll!CreateServiceA                                                          76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ole32.dll!CoGetClassObject                                                           76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] ole32.dll!CoCreateInstanceEx                                                         76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\servicing\TrustedInstaller.exe[1620] USER32.dll!EndTask                                                                   773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!LdrLoadDll                                                                               771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!LdrUnloadDll                                                                             771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!LdrGetProcedureAddress                                                                   771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtAllocateVirtualMemory                                                                  77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtClose                                                                                  77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtCreateFile                                                                             77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtCreateProcess                                                                          772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtCreateProcessEx                                                                        772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtDeleteFile                                                                             77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtFreeVirtualMemory                                                                      77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtLoadDriver                                                                             772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtOpenFile                                                                               77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtProtectVirtualMemory                                                                   77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtSetInformationProcess                                                                  77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtUnloadDriver                                                                           772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!NtWriteVirtualMemory                                                                     772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ntdll.dll!RtlAllocateHeap                                                                          772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CreateProcessW                                                                        76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CreateProcessA                                                                        76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!VirtualProtect                                                                        76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!OpenFile                                                                              7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!MoveFileW                                                                             7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CopyFileExW                                                                           76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CopyFileW                                                                             76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!DeleteFileW                                                                           7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!DeleteFileA                                                                           7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!MoveFileWithProgressW                                                                 769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!MoveFileExW                                                                           769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!LoadLibraryExW                                                                        76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!LoadLibraryW                                                                          76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!LoadLibraryExA                                                                        769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!LoadLibraryA                                                                          769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!GetProcAddress                                                                        7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!GetModuleHandleA                                                                      769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!GetModuleHandleW                                                                      7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CreateFileW                                                                           7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CreateFileA                                                                           7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!MoveFileExA                                                                           76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!MoveFileWithProgressA                                                                 76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CopyFileA                                                                             76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!MoveFileA                                                                             7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!CopyFileExA                                                                           769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!WinExec                                                                               769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] kernel32.dll!LoadModule                                                                            769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ADVAPI32.dll!CreateProcessAsUserA                                                                  76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ADVAPI32.dll!CreateProcessAsUserW                                                                  76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ADVAPI32.dll!OpenServiceA                                                                          76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ADVAPI32.dll!OpenServiceW                                                                          76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ADVAPI32.dll!CreateServiceW                                                                        76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ADVAPI32.dll!CreateServiceA                                                                        76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] USER32.dll!EndTask                                                                                 773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ole32.dll!CoGetClassObject                                                                         76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehmsas.exe[1632] ole32.dll!CoCreateInstanceEx                                                                       76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!LdrLoadDll                                                                          771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!LdrUnloadDll                                                                        771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!LdrGetProcedureAddress                                                              771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtAllocateVirtualMemory                                                             77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtClose                                                                             77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtCreateFile                                                                        77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtCreateProcess                                                                     772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtCreateProcessEx                                                                   772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtDeleteFile                                                                        77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtFreeVirtualMemory                                                                 77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtLoadDriver                                                                        772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtOpenFile                                                                          77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtProtectVirtualMemory                                                              77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtSetInformationProcess                                                             77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtUnloadDriver                                                                      772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!NtWriteVirtualMemory                                                                772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ntdll.dll!RtlAllocateHeap                                                                     772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CreateProcessW                                                                   76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CreateProcessA                                                                   76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!VirtualProtect                                                                   76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!OpenFile                                                                         7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!MoveFileW                                                                        7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CopyFileExW                                                                      76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CopyFileW                                                                        76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!DeleteFileW                                                                      7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!DeleteFileA                                                                      7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!MoveFileWithProgressW                                                            769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!MoveFileExW                                                                      769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!LoadLibraryExW                                                                   76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!LoadLibraryW                                                                     76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!LoadLibraryExA                                                                   769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!LoadLibraryA                                                                     769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!GetProcAddress                                                                   7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!GetModuleHandleA                                                                 769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!GetModuleHandleW                                                                 7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CreateFileW                                                                      7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CreateFileA                                                                      7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!MoveFileExA                                                                      76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!MoveFileWithProgressA                                                            76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CopyFileA                                                                        76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!MoveFileA                                                                        7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!CopyFileExA                                                                      769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!WinExec                                                                          769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] kernel32.dll!LoadModule                                                                       769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] USER32.dll!EndTask                                                                            773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ADVAPI32.dll!CreateProcessAsUserA                                                             76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ADVAPI32.dll!CreateProcessAsUserW                                                             76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ADVAPI32.dll!OpenServiceA                                                                     76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ADVAPI32.dll!OpenServiceW                                                                     76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ADVAPI32.dll!CreateServiceW                                                                   76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ADVAPI32.dll!CreateServiceA                                                                   76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ole32.dll!CoGetClassObject                                                                    76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\atieclxx.exe[1684] ole32.dll!CoCreateInstanceEx                                                                  76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1712] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] shell32.dll!ShellExecuteW                                                                      75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] shell32.dll!ShellExecuteExW                                                                    758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] shell32.dll!ShellExecuteEx                                                                     75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] shell32.dll!ShellExecuteA                                                                      75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] WinInet.dll!InternetConnectA                                                                   76B8DEAE 5 Bytes  JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[1780] WinInet.dll!InternetConnectW                                                                   76B8F862 5 Bytes  JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] WS2_32.dll!WSASocketW                                                                          758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] WS2_32.dll!WSASocketA                                                                          75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ole32.dll!CoGetClassObject                                                                     76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\spoolsv.exe[2044] ole32.dll!CoCreateInstanceEx                                                                   76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2144] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!LdrLoadDll                                                                      771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!LdrUnloadDll                                                                    771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!LdrGetProcedureAddress                                                          771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtAllocateVirtualMemory                                                         77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtClose                                                                         77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtCreateFile                                                                    77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtCreateProcess                                                                 772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtCreateProcessEx                                                               772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtDeleteFile                                                                    77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtFreeVirtualMemory                                                             77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtLoadDriver                                                                    772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtOpenFile                                                                      77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtProtectVirtualMemory                                                          77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtSetInformationProcess                                                         77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtUnloadDriver                                                                  772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!NtWriteVirtualMemory                                                            772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ntdll.dll!RtlAllocateHeap                                                                 772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CreateProcessW                                                               76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CreateProcessA                                                               76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!VirtualProtect                                                               76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!OpenFile                                                                     7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!MoveFileW                                                                    7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CopyFileExW                                                                  76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CopyFileW                                                                    76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!DeleteFileW                                                                  7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!DeleteFileA                                                                  7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!MoveFileWithProgressW                                                        769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!MoveFileExW                                                                  769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!LoadLibraryExW                                                               76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!LoadLibraryW                                                                 76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!LoadLibraryExA                                                               769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!LoadLibraryA                                                                 769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!GetProcAddress                                                               7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!GetModuleHandleA                                                             769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!GetModuleHandleW                                                             7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CreateFileW                                                                  7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CreateFileA                                                                  7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!MoveFileExA                                                                  76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!MoveFileWithProgressA                                                        76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CopyFileA                                                                    76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!MoveFileA                                                                    7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!CopyFileExA                                                                  769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!WinExec                                                                      769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] kernel32.dll!LoadModule                                                                   769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ADVAPI32.dll!CreateProcessAsUserA                                                         76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ADVAPI32.dll!CreateProcessAsUserW                                                         76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ADVAPI32.dll!OpenServiceA                                                                 76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ADVAPI32.dll!OpenServiceW                                                                 76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ADVAPI32.dll!CreateServiceW                                                               76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] ADVAPI32.dll!CreateServiceA                                                               76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Secunia\PSI\sua.exe[2188] USER32.dll!EndTask                                                                        773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[2312] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!LdrLoadDll                                                        771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!LdrUnloadDll                                                      771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!LdrGetProcedureAddress                                            771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtAllocateVirtualMemory                                           77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtClose                                                           77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtCreateFile                                                      77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtCreateProcess                                                   772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtCreateProcessEx                                                 772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtDeleteFile                                                      77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtFreeVirtualMemory                                               77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtLoadDriver                                                      772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtOpenFile                                                        77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtProtectVirtualMemory                                            77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtSetInformationProcess                                           77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtUnloadDriver                                                    772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!NtWriteVirtualMemory                                              772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ntdll.dll!RtlAllocateHeap                                                   772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CreateProcessW                                                 76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CreateProcessA                                                 76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!VirtualProtect                                                 76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!OpenFile                                                       7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!MoveFileW                                                      7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CopyFileExW                                                    76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CopyFileW                                                      76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!DeleteFileW                                                    7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!DeleteFileA                                                    7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!MoveFileWithProgressW                                          769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!MoveFileExW                                                    769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!LoadLibraryExW                                                 76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!LoadLibraryW                                                   76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!LoadLibraryExA                                                 769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!LoadLibraryA                                                   769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!GetProcAddress                                                 7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!GetModuleHandleA                                               769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!GetModuleHandleW                                               7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CreateFileW                                                    7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CreateFileA                                                    7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!MoveFileExA                                                    76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!MoveFileWithProgressA                                          76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CopyFileA                                                      76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!MoveFileA                                                      7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!CopyFileExA                                                    769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!WinExec                                                        769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] kernel32.dll!LoadModule                                                     769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ADVAPI32.dll!CreateProcessAsUserA                                           76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ADVAPI32.dll!CreateProcessAsUserW                                           76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ADVAPI32.dll!OpenServiceA                                                   76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ADVAPI32.dll!OpenServiceW                                                   76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ADVAPI32.dll!CreateServiceW                                                 76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ADVAPI32.dll!CreateServiceA                                                 76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] USER32.dll!EndTask                                                          773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ole32.dll!CoGetClassObject                                                  76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnscfg.exe[2336] ole32.dll!CoCreateInstanceEx                                                76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!LdrLoadDll                                              771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!LdrUnloadDll                                            771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!LdrGetProcedureAddress                                  771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtAllocateVirtualMemory                                 77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtClose                                                 77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtCreateFile                                            77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtCreateProcess                                         772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtCreateProcessEx                                       772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtDeleteFile                                            77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtFreeVirtualMemory                                     77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtLoadDriver                                            772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtOpenFile                                              77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtProtectVirtualMemory                                  77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtSetInformationProcess                                 77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtUnloadDriver                                          772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!NtWriteVirtualMemory                                    772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ntdll.dll!RtlAllocateHeap                                         772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CreateProcessW                                       76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CreateProcessA                                       76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!VirtualProtect                                       76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!OpenFile                                             7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!MoveFileW                                            7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CopyFileExW                                          76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CopyFileW                                            76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!DeleteFileW                                          7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!DeleteFileA                                          7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!MoveFileWithProgressW                                769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!MoveFileExW                                          769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!LoadLibraryExW                                       76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!LoadLibraryW                                         76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!LoadLibraryExA                                       769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!LoadLibraryA                                         769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!GetProcAddress                                       7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!GetModuleHandleA                                     769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!GetModuleHandleW                                     7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CreateFileW                                          7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CreateFileA                                          7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!MoveFileExA                                          76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!MoveFileWithProgressA                                76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CopyFileA                                            76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!MoveFileA                                            7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!CopyFileExA                                          769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!WinExec                                              769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] kernel32.dll!LoadModule                                           769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ADVAPI32.dll!CreateProcessAsUserA                                 76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ADVAPI32.dll!CreateProcessAsUserW                                 76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ADVAPI32.dll!OpenServiceA                                         76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ADVAPI32.dll!OpenServiceW                                         76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ADVAPI32.dll!CreateServiceW                                       76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] ADVAPI32.dll!CreateServiceA                                       76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe[2364] USER32.dll!EndTask                                                773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!LdrLoadDll                                         771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!LdrUnloadDll                                       771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!LdrGetProcedureAddress                             771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtAllocateVirtualMemory                            77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtClose                                            77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtCreateFile                                       77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtCreateProcess                                    772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtCreateProcessEx                                  772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtDeleteFile                                       77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtFreeVirtualMemory                                77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtLoadDriver                                       772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtOpenFile                                         77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtProtectVirtualMemory                             77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtSetInformationProcess                            77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtUnloadDriver                                     772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!NtWriteVirtualMemory                               772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ntdll.dll!RtlAllocateHeap                                    772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CreateProcessW                                  76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CreateProcessA                                  76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!VirtualProtect                                  76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!OpenFile                                        7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!MoveFileW                                       7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CopyFileExW                                     76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CopyFileW                                       76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!DeleteFileW                                     7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!DeleteFileA                                     7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!MoveFileWithProgressW                           769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!MoveFileExW                                     769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!LoadLibraryExW                                  76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!LoadLibraryW                                    76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!LoadLibraryExA                                  769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!LoadLibraryA                                    769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!GetProcAddress                                  7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!GetModuleHandleA                                769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!GetModuleHandleW                                7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CreateFileW                                     7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CreateFileA                                     7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!MoveFileExA                                     76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!MoveFileWithProgressA                           76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CopyFileA                                       76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!MoveFileA                                       7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!CopyFileExA                                     769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!WinExec                                         769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] kernel32.dll!LoadModule                                      769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] USER32.dll!EndTask                                           773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ADVAPI32.dll!CreateProcessAsUserA                            76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ADVAPI32.dll!CreateProcessAsUserW                            76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ADVAPI32.dll!OpenServiceA                                    76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ADVAPI32.dll!OpenServiceW                                    76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ADVAPI32.dll!CreateServiceW                                  76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ADVAPI32.dll!CreateServiceA                                  76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] WS2_32.dll!WSASocketW                                        758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] WS2_32.dll!WSASocketA                                        75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ole32.dll!CoGetClassObject                                   76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe[2384] ole32.dll!CoCreateInstanceEx                                 76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!LdrLoadDll                                                                             771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!LdrUnloadDll                                                                           771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!LdrGetProcedureAddress                                                                 771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtAllocateVirtualMemory                                                                77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtClose                                                                                77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtCreateFile                                                                           77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtCreateProcess                                                                        772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtCreateProcessEx                                                                      772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtDeleteFile                                                                           77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtFreeVirtualMemory                                                                    77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtLoadDriver                                                                           772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtOpenFile                                                                             77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtProtectVirtualMemory                                                                 77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtSetInformationProcess                                                                77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtUnloadDriver                                                                         772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!NtWriteVirtualMemory                                                                   772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ntdll.dll!RtlAllocateHeap                                                                        772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CreateProcessW                                                                      76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CreateProcessA                                                                      76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!VirtualProtect                                                                      76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!OpenFile                                                                            7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!MoveFileW                                                                           7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CopyFileExW                                                                         76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CopyFileW                                                                           76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!DeleteFileW                                                                         7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!DeleteFileA                                                                         7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!MoveFileWithProgressW                                                               769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!MoveFileExW                                                                         769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!LoadLibraryExW                                                                      76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!LoadLibraryW                                                                        76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!LoadLibraryExA                                                                      769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!LoadLibraryA                                                                        769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!GetProcAddress                                                                      7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!GetModuleHandleA                                                                    769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!GetModuleHandleW                                                                    7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CreateFileW                                                                         7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CreateFileA                                                                         7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!MoveFileExA                                                                         76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!MoveFileWithProgressA                                                               76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CopyFileA                                                                           76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!MoveFileA                                                                           7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!CopyFileExA                                                                         769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!WinExec                                                                             769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] kernel32.dll!LoadModule                                                                          769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] USER32.dll!EndTask                                                                               773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ADVAPI32.dll!CreateProcessAsUserA                                                                76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ADVAPI32.dll!CreateProcessAsUserW                                                                76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ADVAPI32.dll!OpenServiceA                                                                        76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ADVAPI32.dll!OpenServiceW                                                                        76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ADVAPI32.dll!CreateServiceW                                                                      76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] ADVAPI32.dll!CreateServiceA                                                                      76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] WS2_32.dll!WSASocketW                                                                            758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnat.exe[2400] WS2_32.dll!WSASocketA                                                                            75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\svchost.exe[2420] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!LdrLoadDll                                   771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!LdrUnloadDll                                 771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!LdrGetProcedureAddress                       771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtAllocateVirtualMemory                      77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtClose                                      77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtCreateFile                                 77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtCreateProcess                              772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtCreateProcessEx                            772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtDeleteFile                                 77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtFreeVirtualMemory                          77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtLoadDriver                                 772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtOpenFile                                   77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtProtectVirtualMemory                       77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtSetInformationProcess                      77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtUnloadDriver                               772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!NtWriteVirtualMemory                         772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ntdll.dll!RtlAllocateHeap                              772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CreateProcessW                            76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CreateProcessA                            76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!VirtualProtect                            76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!OpenFile                                  7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!MoveFileW                                 7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CopyFileExW                               76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CopyFileW                                 76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!DeleteFileW                               7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!DeleteFileA                               7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!MoveFileWithProgressW                     769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!MoveFileExW                               769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!LoadLibraryExW                            76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!LoadLibraryW                              76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!LoadLibraryExA                            769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!LoadLibraryA                              769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!GetProcAddress                            7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!GetModuleHandleA                          769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!GetModuleHandleW                          7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CreateFileW                               7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CreateFileA                               7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!MoveFileExA                               76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!MoveFileWithProgressA                     76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CopyFileA                                 76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!MoveFileA                                 7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!CopyFileExA                               769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!WinExec                                   769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] kernel32.dll!LoadModule                                769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ADVAPI32.dll!CreateProcessAsUserA                      76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ADVAPI32.dll!CreateProcessAsUserW                      76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ADVAPI32.dll!OpenServiceA                              76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ADVAPI32.dll!OpenServiceW                              76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ADVAPI32.dll!CreateServiceW                            76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ADVAPI32.dll!CreateServiceA                            76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ole32.dll!CoGetClassObject                             76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] ole32.dll!CoCreateInstanceEx                           76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] USER32.dll!EndTask                                     773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] WS2_32.dll!WSASocketW                                  758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] WS2_32.dll!WSASocketA                                  75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] SHELL32.dll!ShellExecuteW                              75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] SHELL32.dll!ShellExecuteExW                            758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] SHELL32.dll!ShellExecuteEx                             75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE[2440] SHELL32.dll!ShellExecuteA                              75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!LdrLoadDll                                                                     771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!LdrUnloadDll                                                                   771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!LdrGetProcedureAddress                                                         771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtAllocateVirtualMemory                                                        77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtClose                                                                        77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtCreateFile                                                                   77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtCreateProcess                                                                772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtCreateProcessEx                                                              772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtDeleteFile                                                                   77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtFreeVirtualMemory                                                            77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtLoadDriver                                                                   772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtOpenFile                                                                     77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtProtectVirtualMemory                                                         77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtSetInformationProcess                                                        77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtUnloadDriver                                                                 772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!NtWriteVirtualMemory                                                           772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ntdll.dll!RtlAllocateHeap                                                                772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CreateProcessW                                                              76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CreateProcessA                                                              76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!VirtualProtect                                                              76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!OpenFile                                                                    7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!MoveFileW                                                                   7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CopyFileExW                                                                 76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CopyFileW                                                                   76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!DeleteFileW                                                                 7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!DeleteFileA                                                                 7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!MoveFileWithProgressW                                                       769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!MoveFileExW                                                                 769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!LoadLibraryExW                                                              76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!LoadLibraryW                                                                76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!LoadLibraryExA                                                              769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!LoadLibraryA                                                                769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!GetProcAddress                                                              7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!GetModuleHandleA                                                            769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!GetModuleHandleW                                                            7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CreateFileW                                                                 7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CreateFileA                                                                 7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!MoveFileExA                                                                 76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!MoveFileWithProgressA                                                       76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CopyFileA                                                                   76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!MoveFileA                                                                   7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!CopyFileExA                                                                 769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!WinExec                                                                     769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] kernel32.dll!LoadModule                                                                  769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ADVAPI32.dll!CreateProcessAsUserA                                                        76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ADVAPI32.dll!CreateProcessAsUserW                                                        76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ADVAPI32.dll!OpenServiceA                                                                76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ADVAPI32.dll!OpenServiceW                                                                76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ADVAPI32.dll!CreateServiceW                                                              76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ADVAPI32.dll!CreateServiceA                                                              76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] USER32.dll!EndTask                                                                       773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ole32.dll!CoGetClassObject                                                               76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] ole32.dll!CoCreateInstanceEx                                                             76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] SHELL32.dll!ShellExecuteW                                                                75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] SHELL32.dll!ShellExecuteExW                                                              758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] SHELL32.dll!ShellExecuteEx                                                               75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] SHELL32.dll!ShellExecuteA                                                                75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] WS2_32.dll!WSASocketW                                                                    758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\SearchIndexer.exe[2488] WS2_32.dll!WSASocketA                                                                    75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!LdrLoadDll                                                    771C93A8 5 Bytes  JMP 0103A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!LdrUnloadDll                                                  771DB740 7 Bytes  JMP 0102CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!LdrGetProcedureAddress                                        771E57A0 5 Bytes  JMP 0103CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtAllocateVirtualMemory                                       77203F84 5 Bytes  JMP 0103CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtClose                                                       77204164 5 Bytes  JMP 0102CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtCreateFile                                                  77204224 5 Bytes  JMP 0103CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtCreateProcess                                               772042E4 5 Bytes  JMP 0103CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtCreateProcessEx                                             772042F4 5 Bytes  JMP 0103CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtDeleteFile                                                  77204604 5 Bytes  JMP 0103CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtFreeVirtualMemory                                           77204794 5 Bytes  JMP 0103C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtLoadDriver                                                  772048B4 5 Bytes  JMP 0103CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtOpenFile                                                    77204A04 5 Bytes  JMP 0103CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtProtectVirtualMemory                                        77204B84 5 Bytes  JMP 0103C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtSetInformationProcess                                       77205174 5 Bytes  JMP 0103CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtUnloadDriver                                                772053C4 5 Bytes  JMP 0103CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!NtWriteVirtualMemory                                          772054C4 5 Bytes  JMP 0103CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ntdll.dll!RtlAllocateHeap                                               772063B0 5 Bytes  JMP 0103C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CreateProcessW                                             76911BF3 5 Bytes  JMP 01037790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CreateProcessA                                             76911C28 5 Bytes  JMP 01038320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!VirtualProtect                                             76911DC3 5 Bytes  JMP 0103CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!OpenFile                                                   7691355A 5 Bytes  JMP 0103CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!MoveFileW                                                  7691A2F2 5 Bytes  JMP 0103CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CopyFileExW                                                76920211 7 Bytes  JMP 0103CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CopyFileW                                                  76920299 5 Bytes  JMP 0103CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!DeleteFileW                                                7692F4B6 5 Bytes  JMP 0103CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!DeleteFileA                                                7692F5D2 5 Bytes  JMP 0103CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!MoveFileWithProgressW                                      769310A4 5 Bytes  JMP 0103CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!MoveFileExW                                                769310C8 5 Bytes  JMP 0103CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!LoadLibraryExW                                             76939109 7 Bytes  JMP 0103CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!LoadLibraryW                                               76939362 5 Bytes  JMP 0103CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!LoadLibraryExA                                             769394B4 5 Bytes  JMP 0103CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!LoadLibraryA                                               769394DC 5 Bytes  JMP 0103CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!GetProcAddress                                             7695903B 5 Bytes  JMP 0103CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!GetModuleHandleA                                           769592A5 5 Bytes  JMP 0103CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!GetModuleHandleW                                           7695A804 5 Bytes  JMP 0103CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CreateFileW                                                7695AECB 5 Bytes  JMP 0103CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CreateFileA                                                7695CE5F 5 Bytes  JMP 0103CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!MoveFileExA                                                76960F0A 5 Bytes  JMP 0103CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!MoveFileWithProgressA                                      76960F2A 5 Bytes  JMP 0103CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CopyFileA                                                  76962433 5 Bytes  JMP 0103CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!MoveFileA                                                  7699F641 5 Bytes  JMP 0103CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!CopyFileExA                                                769A19F9 5 Bytes  JMP 0103CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!WinExec                                                    769A5CF7 5 Bytes  JMP 0103CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] kernel32.dll!LoadModule                                                 769A5E4F 5 Bytes  JMP 0103CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ADVAPI32.dll!CreateProcessAsUserA                                       76F3CEB9 5 Bytes  JMP 01036BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ADVAPI32.dll!CreateProcessAsUserW                                       76F51EE9 5 Bytes  JMP 010362C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ADVAPI32.dll!OpenServiceA                                               76F52EBD 7 Bytes  JMP 0103D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ADVAPI32.dll!OpenServiceW                                               76F58354 7 Bytes  JMP 0103D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ADVAPI32.dll!CreateServiceW                                             76F79EB4 7 Bytes  JMP 0103DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ADVAPI32.dll!CreateServiceA                                             76FB72A1 7 Bytes  JMP 0103DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] WS2_32.dll!WSASocketW                                                   758434EB 7 Bytes  JMP 0103C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] WS2_32.dll!WSASocketA                                                   75848FA9 5 Bytes  JMP 0103C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] USER32.dll!EndTask                                                      773AAD32 5 Bytes  JMP 0103E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ole32.dll!CoGetClassObject                                              76C9FAE8 5 Bytes  JMP 0103E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] ole32.dll!CoCreateInstanceEx                                            76CB9F81 5 Bytes  JMP 0103E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] WININET.dll!InternetConnectA                                            76B8DEAE 5 Bytes  JMP 0103C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] WININET.dll!InternetConnectW                                            76B8F862 5 Bytes  JMP 0103C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] SHELL32.dll!ShellExecuteW                                               75889725 5 Bytes  JMP 0103C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] SHELL32.dll!ShellExecuteExW                                             758DC155 5 Bytes  JMP 0103C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] SHELL32.dll!ShellExecuteEx                                              75A8A292 5 Bytes  JMP 0103C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\VMware\VMware Player\vmware-authd.exe[2544] SHELL32.dll!ShellExecuteA                                               75A8A32D 5 Bytes  JMP 0103CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!LdrLoadDll                                  771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!LdrUnloadDll                                771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!LdrGetProcedureAddress                      771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtAllocateVirtualMemory                     77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtClose                                     77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtCreateFile                                77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtCreateProcess                             772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtCreateProcessEx                           772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtDeleteFile                                77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtFreeVirtualMemory                         77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtLoadDriver                                772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtOpenFile                                  77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtProtectVirtualMemory                      77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtSetInformationProcess                     77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtUnloadDriver                              772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!NtWriteVirtualMemory                        772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ntdll.dll!RtlAllocateHeap                             772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CreateProcessW                           76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CreateProcessA                           76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!VirtualProtect                           76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!OpenFile                                 7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!MoveFileW                                7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CopyFileExW                              76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CopyFileW                                76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!DeleteFileW                              7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!DeleteFileA                              7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!MoveFileWithProgressW                    769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!MoveFileExW                              769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!LoadLibraryExW                           76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!LoadLibraryW                             76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!LoadLibraryExA                           769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!LoadLibraryA                             769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!GetProcAddress                           7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!GetModuleHandleA                         769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!GetModuleHandleW                         7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CreateFileW                              7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CreateFileA                              7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!MoveFileExA                              76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!MoveFileWithProgressA                    76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CopyFileA                                76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!MoveFileA                                7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!CopyFileExA                              769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!WinExec                                  769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] kernel32.dll!LoadModule                               769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ADVAPI32.dll!CreateProcessAsUserA                     76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ADVAPI32.dll!CreateProcessAsUserW                     76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ADVAPI32.dll!OpenServiceA                             76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ADVAPI32.dll!OpenServiceW                             76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ADVAPI32.dll!CreateServiceW                           76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] ADVAPI32.dll!CreateServiceA                           76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] USER32.dll!EndTask                                    773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] SHELL32.dll!ShellExecuteW                             75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] SHELL32.dll!ShellExecuteExW                           758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] SHELL32.dll!ShellExecuteEx                            75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe[2564] SHELL32.dll!ShellExecuteA                             75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!LdrLoadDll                                                                         771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!LdrUnloadDll                                                                       771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!LdrGetProcedureAddress                                                             771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtAllocateVirtualMemory                                                            77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtClose                                                                            77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtCreateFile                                                                       77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtCreateProcess                                                                    772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtCreateProcessEx                                                                  772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtDeleteFile                                                                       77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtFreeVirtualMemory                                                                77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtLoadDriver                                                                       772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtOpenFile                                                                         77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtProtectVirtualMemory                                                             77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtSetInformationProcess                                                            77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtUnloadDriver                                                                     772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!NtWriteVirtualMemory                                                               772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ntdll.dll!RtlAllocateHeap                                                                    772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CreateProcessW                                                                  76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CreateProcessA                                                                  76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!VirtualProtect                                                                  76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!OpenFile                                                                        7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!MoveFileW                                                                       7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CopyFileExW                                                                     76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CopyFileW                                                                       76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!DeleteFileW                                                                     7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!DeleteFileA                                                                     7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!MoveFileWithProgressW                                                           769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!MoveFileExW                                                                     769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!LoadLibraryExW                                                                  76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!LoadLibraryW                                                                    76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!LoadLibraryExA                                                                  769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!LoadLibraryA                                                                    769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!GetProcAddress                                                                  7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!GetModuleHandleA                                                                769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!GetModuleHandleW                                                                7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CreateFileW                                                                     7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CreateFileA                                                                     7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!MoveFileExA                                                                     76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!MoveFileWithProgressA                                                           76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CopyFileA                                                                       76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!MoveFileA                                                                       7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!CopyFileExA                                                                     769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!WinExec                                                                         769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] kernel32.dll!LoadModule                                                                      769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] USER32.dll!EndTask                                                                           773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ADVAPI32.dll!CreateProcessAsUserA                                                            76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ADVAPI32.dll!CreateProcessAsUserW                                                            76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ADVAPI32.dll!OpenServiceA                                                                    76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ADVAPI32.dll!OpenServiceW                                                                    76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ADVAPI32.dll!CreateServiceW                                                                  76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] ADVAPI32.dll!CreateServiceA                                                                  76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] WS2_32.dll!WSASocketW                                                                        758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\vmnetdhcp.exe[2696] WS2_32.dll!WSASocketA                                                                        75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!LdrLoadDll                                         771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!LdrUnloadDll                                       771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!LdrGetProcedureAddress                             771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtAllocateVirtualMemory                            77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtClose                                            77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtCreateFile                                       77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtCreateProcess                                    772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtCreateProcessEx                                  772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtDeleteFile                                       77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtFreeVirtualMemory                                77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtLoadDriver                                       772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtOpenFile                                         77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtProtectVirtualMemory                             77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtSetInformationProcess                            77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtUnloadDriver                                     772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!NtWriteVirtualMemory                               772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ntdll.dll!RtlAllocateHeap                                    772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CreateProcessW                                  76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CreateProcessA                                  76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!VirtualProtect                                  76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!OpenFile                                        7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!MoveFileW                                       7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CopyFileExW                                     76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CopyFileW                                       76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!DeleteFileW                                     7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!DeleteFileA                                     7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!MoveFileWithProgressW                           769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!MoveFileExW                                     769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!LoadLibraryExW                                  76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!LoadLibraryW                                    76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!LoadLibraryExA                                  769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!LoadLibraryA                                    769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!GetProcAddress                                  7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!GetModuleHandleA                                769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!GetModuleHandleW                                7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CreateFileW                                     7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CreateFileA                                     7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!MoveFileExA                                     76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!MoveFileWithProgressA                           76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CopyFileA                                       76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!MoveFileA                                       7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!CopyFileExA                                     769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!WinExec                                         769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] kernel32.dll!LoadModule                                      769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ADVAPI32.dll!CreateProcessAsUserA                            76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ADVAPI32.dll!CreateProcessAsUserW                            76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ADVAPI32.dll!OpenServiceA                                    76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ADVAPI32.dll!OpenServiceW                                    76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ADVAPI32.dll!CreateServiceW                                  76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ADVAPI32.dll!CreateServiceA                                  76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ole32.dll!CoGetClassObject                                   76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] ole32.dll!CoCreateInstanceEx                                 76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] USER32.dll!EndTask                                           773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] SHELL32.dll!ShellExecuteW                                    75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] SHELL32.dll!ShellExecuteExW                                  758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] SHELL32.dll!ShellExecuteEx                                   75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe[2848] SHELL32.dll!ShellExecuteA                                    75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!LdrLoadDll                                                                               771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!LdrUnloadDll                                                                             771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!LdrGetProcedureAddress                                                                   771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtAllocateVirtualMemory                                                                  77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtClose                                                                                  77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtCreateFile                                                                             77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtCreateProcess                                                                          772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtCreateProcessEx                                                                        772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtDeleteFile                                                                             77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtFreeVirtualMemory                                                                      77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtLoadDriver                                                                             772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtOpenFile                                                                               77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtProtectVirtualMemory                                                                   77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtSetInformationProcess                                                                  77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtUnloadDriver                                                                           772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!NtWriteVirtualMemory                                                                     772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ntdll.dll!RtlAllocateHeap                                                                          772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CreateProcessW                                                                        76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CreateProcessA                                                                        76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!VirtualProtect                                                                        76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!OpenFile                                                                              7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!MoveFileW                                                                             7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CopyFileExW                                                                           76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CopyFileW                                                                             76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!DeleteFileW                                                                           7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!DeleteFileA                                                                           7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!MoveFileWithProgressW                                                                 769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!MoveFileExW                                                                           769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!LoadLibraryExW                                                                        76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!LoadLibraryW                                                                          76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!LoadLibraryExA                                                                        769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!LoadLibraryA                                                                          769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!GetProcAddress                                                                        7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!GetModuleHandleA                                                                      769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!GetModuleHandleW                                                                      7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CreateFileW                                                                           7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CreateFileA                                                                           7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!MoveFileExA                                                                           76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!MoveFileWithProgressA                                                                 76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CopyFileA                                                                             76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!MoveFileA                                                                             7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!CopyFileExA                                                                           769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!WinExec                                                                               769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] kernel32.dll!LoadModule                                                                            769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ADVAPI32.dll!CreateProcessAsUserA                                                                  76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ADVAPI32.dll!CreateProcessAsUserW                                                                  76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ADVAPI32.dll!OpenServiceA                                                                          76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ADVAPI32.dll!OpenServiceW                                                                          76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ADVAPI32.dll!CreateServiceW                                                                        76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ADVAPI32.dll!CreateServiceA                                                                        76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] USER32.dll!EndTask                                                                                 773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] WS2_32.dll!WSASocketW                                                                              758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] WS2_32.dll!WSASocketA                                                                              75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ole32.dll!CoGetClassObject                                                                         76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\alg.exe[2876] ole32.dll!CoCreateInstanceEx                                                                       76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!LdrLoadDll                                                        771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!LdrUnloadDll                                                      771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!LdrGetProcedureAddress                                            771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtAllocateVirtualMemory                                           77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtClose                                                           77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtCreateFile                                                      77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtCreateProcess                                                   772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtCreateProcessEx                                                 772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtDeleteFile                                                      77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtFreeVirtualMemory                                               77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtLoadDriver                                                      772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtOpenFile                                                        77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtProtectVirtualMemory                                            77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtSetInformationProcess                                           77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtUnloadDriver                                                    772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!NtWriteVirtualMemory                                              772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ntdll.dll!RtlAllocateHeap                                                   772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CreateProcessW                                                 76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CreateProcessA                                                 76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!VirtualProtect                                                 76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!OpenFile                                                       7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!MoveFileW                                                      7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CopyFileExW                                                    76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CopyFileW                                                      76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!DeleteFileW                                                    7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!DeleteFileA                                                    7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!MoveFileWithProgressW                                          769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!MoveFileExW                                                    769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!LoadLibraryExW                                                 76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!LoadLibraryW                                                   76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!LoadLibraryExA                                                 769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!LoadLibraryA                                                   769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!GetProcAddress                                                 7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!GetModuleHandleA                                               769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!GetModuleHandleW                                               7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CreateFileW                                                    7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CreateFileA                                                    7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!MoveFileExA                                                    76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!MoveFileWithProgressA                                          76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CopyFileA                                                      76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!MoveFileA                                                      7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!CopyFileExA                                                    769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!WinExec                                                        769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] kernel32.dll!LoadModule                                                     769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ADVAPI32.dll!CreateProcessAsUserA                                           76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ADVAPI32.dll!CreateProcessAsUserW                                           76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ADVAPI32.dll!OpenServiceA                                                   76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ADVAPI32.dll!OpenServiceW                                                   76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ADVAPI32.dll!CreateServiceW                                                 76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ADVAPI32.dll!CreateServiceA                                                 76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] USER32.dll!EndTask                                                          773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ole32.dll!CoGetClassObject                                                  76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] ole32.dll!CoCreateInstanceEx                                                76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] WS2_32.dll!WSASocketW                                                       758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Windows Media Player\wmpnetwk.exe[3024] WS2_32.dll!WSASocketA                                                       75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!LdrLoadDll                                                                              771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!LdrUnloadDll                                                                            771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!LdrGetProcedureAddress                                                                  771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtAllocateVirtualMemory                                                                 77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtClose                                                                                 77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtCreateFile                                                                            77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtCreateProcess                                                                         772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtCreateProcessEx                                                                       772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtDeleteFile                                                                            77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtFreeVirtualMemory                                                                     77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtLoadDriver                                                                            772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtOpenFile                                                                              77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtProtectVirtualMemory                                                                  77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtSetInformationProcess                                                                 77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtUnloadDriver                                                                          772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!NtWriteVirtualMemory                                                                    772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ntdll.dll!RtlAllocateHeap                                                                         772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CreateProcessW                                                                       76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CreateProcessA                                                                       76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!VirtualProtect                                                                       76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!OpenFile                                                                             7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!MoveFileW                                                                            7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CopyFileExW                                                                          76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CopyFileW                                                                            76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!DeleteFileW                                                                          7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!DeleteFileA                                                                          7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!MoveFileWithProgressW                                                                769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!MoveFileExW                                                                          769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!LoadLibraryExW                                                                       76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!LoadLibraryW                                                                         76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!LoadLibraryExA                                                                       769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!LoadLibraryA                                                                         769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!GetProcAddress                                                                       7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!GetModuleHandleA                                                                     769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!GetModuleHandleW                                                                     7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CreateFileW                                                                          7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CreateFileA                                                                          7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!MoveFileExA                                                                          76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!MoveFileWithProgressA                                                                76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CopyFileA                                                                            76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!MoveFileA                                                                            7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!CopyFileExA                                                                          769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!WinExec                                                                              769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] kernel32.dll!LoadModule                                                                           769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ADVAPI32.dll!CreateProcessAsUserA                                                                 76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ADVAPI32.dll!CreateProcessAsUserW                                                                 76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ADVAPI32.dll!OpenServiceA                                                                         76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ADVAPI32.dll!OpenServiceW                                                                         76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ADVAPI32.dll!CreateServiceW                                                                       76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ADVAPI32.dll!CreateServiceA                                                                       76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] USER32.dll!EndTask                                                                                773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ole32.dll!CoGetClassObject                                                                        76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] ole32.dll!CoCreateInstanceEx                                                                      76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] SHELL32.dll!ShellExecuteW                                                                         75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] SHELL32.dll!ShellExecuteExW                                                                       758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] SHELL32.dll!ShellExecuteEx                                                                        75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehRecvr.exe[3220] SHELL32.dll!ShellExecuteA                                                                         75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!LdrLoadDll                                                                               771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!LdrUnloadDll                                                                             771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!LdrGetProcedureAddress                                                                   771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtAllocateVirtualMemory                                                                  77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtClose                                                                                  77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtCreateFile                                                                             77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtCreateProcess                                                                          772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtCreateProcessEx                                                                        772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtDeleteFile                                                                             77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtFreeVirtualMemory                                                                      77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtLoadDriver                                                                             772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtOpenFile                                                                               77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtProtectVirtualMemory                                                                   77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtSetInformationProcess                                                                  77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtUnloadDriver                                                                           772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!NtWriteVirtualMemory                                                                     772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ntdll.dll!RtlAllocateHeap                                                                          772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CreateProcessW                                                                        76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CreateProcessA                                                                        76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!VirtualProtect                                                                        76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!OpenFile                                                                              7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!MoveFileW                                                                             7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CopyFileExW                                                                           76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CopyFileW                                                                             76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!DeleteFileW                                                                           7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!DeleteFileA                                                                           7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!MoveFileWithProgressW                                                                 769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!MoveFileExW                                                                           769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!LoadLibraryExW                                                                        76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!LoadLibraryW                                                                          76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!LoadLibraryExA                                                                        769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!LoadLibraryA                                                                          769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!GetProcAddress                                                                        7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!GetModuleHandleA                                                                      769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!GetModuleHandleW                                                                      7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CreateFileW                                                                           7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CreateFileA                                                                           7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!MoveFileExA                                                                           76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!MoveFileWithProgressA                                                                 76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CopyFileA                                                                             76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!MoveFileA                                                                             7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!CopyFileExA                                                                           769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!WinExec                                                                               769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] kernel32.dll!LoadModule                                                                            769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ADVAPI32.dll!CreateProcessAsUserA                                                                  76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ADVAPI32.dll!CreateProcessAsUserW                                                                  76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ADVAPI32.dll!OpenServiceA                                                                          76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ADVAPI32.dll!OpenServiceW                                                                          76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ADVAPI32.dll!CreateServiceW                                                                        76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ADVAPI32.dll!CreateServiceA                                                                        76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] USER32.dll!EndTask                                                                                 773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ole32.dll!CoGetClassObject                                                                         76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\Dwm.exe[3300] ole32.dll!CoCreateInstanceEx                                                                       76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] SHELL32.dll!ShellExecuteW                                                                      75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] SHELL32.dll!ShellExecuteExW                                                                    758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] SHELL32.dll!ShellExecuteEx                                                                     75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] SHELL32.dll!ShellExecuteA                                                                      75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ole32.dll!CoGetClassObject                                                                     76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3340] ole32.dll!CoCreateInstanceEx                                                                   76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!LdrLoadDll                                                                              771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!LdrUnloadDll                                                                            771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!LdrGetProcedureAddress                                                                  771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtAllocateVirtualMemory                                                                 77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtClose                                                                                 77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtCreateFile                                                                            77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtCreateProcess                                                                         772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtCreateProcessEx                                                                       772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtDeleteFile                                                                            77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtFreeVirtualMemory                                                                     77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtLoadDriver                                                                            772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtOpenFile                                                                              77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtProtectVirtualMemory                                                                  77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtSetInformationProcess                                                                 77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtUnloadDriver                                                                          772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!NtWriteVirtualMemory                                                                    772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ntdll.dll!RtlAllocateHeap                                                                         772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CreateProcessW                                                                       76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CreateProcessA                                                                       76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!VirtualProtect                                                                       76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!OpenFile                                                                             7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!MoveFileW                                                                            7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CopyFileExW                                                                          76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CopyFileW                                                                            76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!DeleteFileW                                                                          7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!DeleteFileA                                                                          7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!MoveFileWithProgressW                                                                769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!MoveFileExW                                                                          769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!LoadLibraryExW                                                                       76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!LoadLibraryW                                                                         76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!LoadLibraryExA                                                                       769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!LoadLibraryA                                                                         769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!GetProcAddress                                                                       7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!GetModuleHandleA                                                                     769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!GetModuleHandleW                                                                     7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CreateFileW                                                                          7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CreateFileA                                                                          7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!MoveFileExA                                                                          76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!MoveFileWithProgressA                                                                76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CopyFileA                                                                            76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!MoveFileA                                                                            7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!CopyFileExA                                                                          769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!WinExec                                                                              769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] kernel32.dll!LoadModule                                                                           769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ADVAPI32.dll!CreateProcessAsUserA                                                                 76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ADVAPI32.dll!CreateProcessAsUserW                                                                 76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ADVAPI32.dll!OpenServiceA                                                                         76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ADVAPI32.dll!OpenServiceW                                                                         76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ADVAPI32.dll!CreateServiceW                                                                       76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ADVAPI32.dll!CreateServiceA                                                                       76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] USER32.dll!EndTask                                                                                773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ole32.dll!CoGetClassObject                                                                        76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehsched.exe[3352] ole32.dll!CoCreateInstanceEx                                                                      76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!LdrLoadDll                                                                                   771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!LdrUnloadDll                                                                                 771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!LdrGetProcedureAddress                                                                       771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtAllocateVirtualMemory                                                                      77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtClose                                                                                      77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtCreateFile                                                                                 77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtCreateProcess                                                                              772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtCreateProcessEx                                                                            772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtDeleteFile                                                                                 77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtFreeVirtualMemory                                                                          77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtLoadDriver                                                                                 772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtOpenFile                                                                                   77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtProtectVirtualMemory                                                                       77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtSetInformationProcess                                                                      77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtUnloadDriver                                                                               772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!NtWriteVirtualMemory                                                                         772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ntdll.dll!RtlAllocateHeap                                                                              772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CreateProcessW                                                                            76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CreateProcessA                                                                            76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!VirtualProtect                                                                            76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!OpenFile                                                                                  7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!MoveFileW                                                                                 7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CopyFileExW                                                                               76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CopyFileW                                                                                 76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!DeleteFileW                                                                               7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!DeleteFileA                                                                               7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!MoveFileWithProgressW                                                                     769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!MoveFileExW                                                                               769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!LoadLibraryExW                                                                            76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!LoadLibraryW                                                                              76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!LoadLibraryExA                                                                            769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!LoadLibraryA                                                                              769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!GetProcAddress                                                                            7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!GetModuleHandleA                                                                          769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!GetModuleHandleW                                                                          7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CreateFileW                                                                               7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CreateFileA                                                                               7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!MoveFileExA                                                                               76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!MoveFileWithProgressA                                                                     76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CopyFileA                                                                                 76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!MoveFileA                                                                                 7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!CopyFileExA                                                                               769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!WinExec                                                                                   769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] kernel32.dll!LoadModule                                                                                769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ADVAPI32.dll!CreateProcessAsUserA                                                                      76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ADVAPI32.dll!CreateProcessAsUserW                                                                      76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ADVAPI32.dll!OpenServiceA                                                                              76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ADVAPI32.dll!OpenServiceW                                                                              76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ADVAPI32.dll!CreateServiceW                                                                            76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ADVAPI32.dll!CreateServiceA                                                                            76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] USER32.dll!EndTask                                                                                     773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] SHELL32.dll!ShellExecuteW                                                                              75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] SHELL32.dll!ShellExecuteExW                                                                            758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] SHELL32.dll!ShellExecuteEx                                                                             75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] SHELL32.dll!ShellExecuteA                                                                              75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ole32.dll!CoGetClassObject                                                                             76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\Explorer.EXE[3360] ole32.dll!CoCreateInstanceEx                                                                           76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] SHELL32.dll!ShellExecuteW                                                                      75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] SHELL32.dll!ShellExecuteExW                                                                    758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] SHELL32.dll!ShellExecuteEx                                                                     75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] SHELL32.dll!ShellExecuteA                                                                      75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ole32.dll!CoGetClassObject                                                                     76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\taskeng.exe[3520] ole32.dll!CoCreateInstanceEx                                                                   76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!LdrLoadDll                                                                     771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!LdrUnloadDll                                                                   771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!LdrGetProcedureAddress                                                         771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtAllocateVirtualMemory                                                        77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtClose                                                                        77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtCreateFile                                                                   77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtCreateProcess                                                                772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtCreateProcessEx                                                              772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtDeleteFile                                                                   77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtFreeVirtualMemory                                                            77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtLoadDriver                                                                   772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtOpenFile                                                                     77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtProtectVirtualMemory                                                         77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtSetInformationProcess                                                        77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtUnloadDriver                                                                 772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!NtWriteVirtualMemory                                                           772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ntdll.dll!RtlAllocateHeap                                                                772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CreateProcessW                                                              76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CreateProcessA                                                              76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!VirtualProtect                                                              76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!OpenFile                                                                    7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!MoveFileW                                                                   7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CopyFileExW                                                                 76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CopyFileW                                                                   76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!DeleteFileW                                                                 7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!DeleteFileA                                                                 7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!MoveFileWithProgressW                                                       769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!MoveFileExW                                                                 769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!LoadLibraryExW                                                              76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!LoadLibraryW                                                                76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!LoadLibraryExA                                                              769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!LoadLibraryA                                                                769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!GetProcAddress                                                              7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!GetModuleHandleA                                                            769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!GetModuleHandleW                                                            7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CreateFileW                                                                 7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CreateFileA                                                                 7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!MoveFileExA                                                                 76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!MoveFileWithProgressA                                                       76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CopyFileA                                                                   76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!MoveFileA                                                                   7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!CopyFileExA                                                                 769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!WinExec                                                                     769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] kernel32.dll!LoadModule                                                                  769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ADVAPI32.dll!CreateProcessAsUserA                                                        76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ADVAPI32.dll!CreateProcessAsUserW                                                        76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ADVAPI32.dll!OpenServiceA                                                                76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ADVAPI32.dll!OpenServiceW                                                                76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ADVAPI32.dll!CreateServiceW                                                              76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ADVAPI32.dll!CreateServiceA                                                              76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ole32.dll!CoGetClassObject                                                               76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] ole32.dll!CoCreateInstanceEx                                                             76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\unsecapp.exe[3680] USER32.dll!EndTask                                                                       773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!LdrLoadDll                                                                          771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!LdrUnloadDll                                                                        771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!LdrGetProcedureAddress                                                              771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtAllocateVirtualMemory                                                             77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtClose                                                                             77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtCreateFile                                                                        77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtCreateProcess                                                                     772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtCreateProcessEx                                                                   772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtDeleteFile                                                                        77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtFreeVirtualMemory                                                                 77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtLoadDriver                                                                        772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtOpenFile                                                                          77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtProtectVirtualMemory                                                              77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtSetInformationProcess                                                             77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtUnloadDriver                                                                      772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!NtWriteVirtualMemory                                                                772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!KiUserExceptionDispatcher                                                           77205BF8 5 Bytes  JMP 1002C750 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ntdll.dll!RtlAllocateHeap                                                                     772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CreateProcessW                                                                   76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CreateProcessA                                                                   76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!VirtualProtect                                                                   76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!OpenFile                                                                         7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!MoveFileW                                                                        7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CopyFileExW                                                                      76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CopyFileW                                                                        76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!DeleteFileW                                                                      7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!DeleteFileA                                                                      7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!MoveFileWithProgressW                                                            769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!MoveFileExW                                                                      769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!LoadLibraryExW                                                                   76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!LoadLibraryW                                                                     76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!LoadLibraryExA                                                                   769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!LoadLibraryA                                                                     769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!GetProcAddress                                                                   7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!GetModuleHandleA                                                                 769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!GetModuleHandleW                                                                 7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CreateFileW                                                                      7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CreateFileA                                                                      7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!MoveFileExA                                                                      76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!MoveFileWithProgressA                                                            76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CopyFileA                                                                        76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!MoveFileA                                                                        7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!CopyFileExA                                                                      769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!WinExec                                                                          769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] kernel32.dll!LoadModule                                                                       769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] USER32.dll!EndTask                                                                            773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ADVAPI32.dll!CreateProcessAsUserA                                                             76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ADVAPI32.dll!CreateProcessAsUserW                                                             76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ADVAPI32.dll!OpenServiceA                                                                     76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ADVAPI32.dll!OpenServiceW                                                                     76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ADVAPI32.dll!CreateServiceW                                                                   76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] ADVAPI32.dll!CreateServiceA                                                                   76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] SHELL32.dll!ShellExecuteW                                                                     75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] SHELL32.dll!ShellExecuteExW                                                                   758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] SHELL32.dll!ShellExecuteEx                                                                    75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] SHELL32.dll!ShellExecuteA                                                                     75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] WS2_32.dll!WSASocketW                                                                         758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Opera\opera.exe[3864] WS2_32.dll!WSASocketA                                                                         75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!LdrLoadDll                                                                                   771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!LdrUnloadDll                                                                                 771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!LdrGetProcedureAddress                                                                       771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtAllocateVirtualMemory                                                                      77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtClose                                                                                      77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtCreateFile                                                                                 77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtCreateProcess                                                                              772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtCreateProcessEx                                                                            772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtDeleteFile                                                                                 77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtFreeVirtualMemory                                                                          77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtLoadDriver                                                                                 772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtOpenFile                                                                                   77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtProtectVirtualMemory                                                                       77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtSetInformationProcess                                                                      77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtUnloadDriver                                                                               772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!NtWriteVirtualMemory                                                                         772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ntdll.dll!RtlAllocateHeap                                                                              772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CreateProcessW                                                                            76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CreateProcessA                                                                            76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!VirtualProtect                                                                            76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!OpenFile                                                                                  7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!MoveFileW                                                                                 7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CopyFileExW                                                                               76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CopyFileW                                                                                 76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!DeleteFileW                                                                               7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!DeleteFileA                                                                               7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!MoveFileWithProgressW                                                                     769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!MoveFileExW                                                                               769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!LoadLibraryExW                                                                            76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!LoadLibraryW                                                                              76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!LoadLibraryExA                                                                            769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!LoadLibraryA                                                                              769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!GetProcAddress                                                                            7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!GetModuleHandleA                                                                          769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!GetModuleHandleW                                                                          7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CreateFileW                                                                               7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CreateFileA                                                                               7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!MoveFileExA                                                                               76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!MoveFileWithProgressA                                                                     76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CopyFileA                                                                                 76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!MoveFileA                                                                                 7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!CopyFileExA                                                                               769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!WinExec                                                                                   769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] kernel32.dll!LoadModule                                                                                769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ADVAPI32.dll!CreateProcessAsUserA                                                                      76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ADVAPI32.dll!CreateProcessAsUserW                                                                      76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ADVAPI32.dll!OpenServiceA                                                                              76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ADVAPI32.dll!OpenServiceW                                                                              76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ADVAPI32.dll!CreateServiceW                                                                            76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ADVAPI32.dll!CreateServiceA                                                                            76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] USER32.dll!EndTask                                                                                     773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ole32.dll!CoGetClassObject                                                                             76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] ole32.dll!CoCreateInstanceEx                                                                           76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] SHELL32.dll!ShellExecuteW                                                                              75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] SHELL32.dll!ShellExecuteExW                                                                            758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] SHELL32.dll!ShellExecuteEx                                                                             75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\RtHDVCpl.exe[3924] SHELL32.dll!ShellExecuteA                                                                              75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!LdrLoadDll                                                      771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!LdrUnloadDll                                                    771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!LdrGetProcedureAddress                                          771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtAllocateVirtualMemory                                         77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtClose                                                         77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtCreateFile                                                    77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtCreateProcess                                                 772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtCreateProcessEx                                               772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtDeleteFile                                                    77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtFreeVirtualMemory                                             77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtLoadDriver                                                    772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtOpenFile                                                      77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtProtectVirtualMemory                                          77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtSetInformationProcess                                         77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtUnloadDriver                                                  772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!NtWriteVirtualMemory                                            772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ntdll.dll!RtlAllocateHeap                                                 772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CreateProcessW                                               76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CreateProcessA                                               76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!VirtualProtect                                               76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!OpenFile                                                     7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!MoveFileW                                                    7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CopyFileExW                                                  76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CopyFileW                                                    76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!DeleteFileW                                                  7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!DeleteFileA                                                  7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!MoveFileWithProgressW                                        769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!MoveFileExW                                                  769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!LoadLibraryExW                                               76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!LoadLibraryW                                                 76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!LoadLibraryExA                                               769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!LoadLibraryA                                                 769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!GetProcAddress                                               7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!GetModuleHandleA                                             769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!GetModuleHandleW                                             7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CreateFileW                                                  7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CreateFileA                                                  7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!MoveFileExA                                                  76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!MoveFileWithProgressA                                        76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CopyFileA                                                    76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!MoveFileA                                                    7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!CopyFileExA                                                  769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!WinExec                                                      769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] kernel32.dll!LoadModule                                                   769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ADVAPI32.dll!CreateProcessAsUserA                                         76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ADVAPI32.dll!CreateProcessAsUserW                                         76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ADVAPI32.dll!OpenServiceA                                                 76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ADVAPI32.dll!OpenServiceW                                                 76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ADVAPI32.dll!CreateServiceW                                               76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ADVAPI32.dll!CreateServiceA                                               76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] USER32.dll!EndTask                                                        773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] SHELL32.dll!ShellExecuteW                                                 75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] SHELL32.dll!ShellExecuteExW                                               758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] SHELL32.dll!ShellExecuteEx                                                75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] SHELL32.dll!ShellExecuteA                                                 75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ole32.dll!CoGetClassObject                                                76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] ole32.dll!CoCreateInstanceEx                                              76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] WS2_32.dll!WSASocketW                                                     758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] WS2_32.dll!WSASocketA                                                     75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] WININET.dll!InternetConnectA                                              76B8DEAE 5 Bytes  JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft IntelliType Pro\itype.exe[3932] WININET.dll!InternetConnectW                                              76B8F862 5 Bytes  JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] ntdll.dll!NtAllocateVirtualMemory                                     77203F84 5 Bytes  JMP 00744760 C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!LdrLoadDll                                                          771C93A8 5 Bytes  JMP 016BA630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!LdrUnloadDll                                                        771DB740 7 Bytes  JMP 016ACE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!LdrGetProcedureAddress                                              771E57A0 5 Bytes  JMP 016BCD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtAllocateVirtualMemory                                             77203F84 5 Bytes  JMP 016BCE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtClose                                                             77204164 5 Bytes  JMP 016ACD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtCreateFile                                                        77204224 5 Bytes  JMP 016BCDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtCreateProcess                                                     772042E4 5 Bytes  JMP 016BCE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtCreateProcessEx                                                   772042F4 5 Bytes  JMP 016BCE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtDeleteFile                                                        77204604 5 Bytes  JMP 016BCE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtFreeVirtualMemory                                                 77204794 5 Bytes  JMP 016BC490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtLoadDriver                                                        772048B4 5 Bytes  JMP 016BCDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtOpenFile                                                          77204A04 5 Bytes  JMP 016BCDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtProtectVirtualMemory                                              77204B84 5 Bytes  JMP 016BC440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtSetInformationProcess                                             77205174 5 Bytes  JMP 016BCD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtUnloadDriver                                                      772053C4 5 Bytes  JMP 016BCD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!NtWriteVirtualMemory                                                772054C4 5 Bytes  JMP 016BCE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ntdll.dll!RtlAllocateHeap                                                     772063B0 5 Bytes  JMP 016BC4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CreateProcessW                                                   76911BF3 5 Bytes  JMP 016B7790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CreateProcessA                                                   76911C28 5 Bytes  JMP 016B8320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!VirtualProtect                                                   76911DC3 5 Bytes  JMP 016BCA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!OpenFile                                                         7691355A 5 Bytes  JMP 016BCCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!MoveFileW                                                        7691A2F2 5 Bytes  JMP 016BCBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CopyFileExW                                                      76920211 7 Bytes  JMP 016BCBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CopyFileW                                                        76920299 5 Bytes  JMP 016BCC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!DeleteFileW                                                      7692F4B6 5 Bytes  JMP 016BCAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!DeleteFileA                                                      7692F5D2 5 Bytes  JMP 016BCB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!MoveFileWithProgressW                                            769310A4 5 Bytes  JMP 016BCB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!MoveFileExW                                                      769310C8 5 Bytes  JMP 016BCB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!LoadLibraryExW                                                   76939109 7 Bytes  JMP 016BCCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!LoadLibraryW                                                     76939362 5 Bytes  JMP 016BCA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!LoadLibraryExA                                                   769394B4 5 Bytes  JMP 016BCCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!LoadLibraryA                                                     769394DC 5 Bytes  JMP 016BCA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!GetProcAddress                                                   7695903B 5 Bytes  JMP 016BCD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!GetModuleHandleA                                                 769592A5 5 Bytes  JMP 016BCAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!GetModuleHandleW                                                 7695A804 5 Bytes  JMP 016BCAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CreateFileW                                                      7695AECB 5 Bytes  JMP 016BCC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CreateFileA                                                      7695CE5F 5 Bytes  JMP 016BCC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!MoveFileExA                                                      76960F0A 5 Bytes  JMP 016BCB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!MoveFileWithProgressA                                            76960F2A 5 Bytes  JMP 016BCB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CopyFileA                                                        76962433 5 Bytes  JMP 016BCC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!MoveFileA                                                        7699F641 5 Bytes  JMP 016BCBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!CopyFileExA                                                      769A19F9 5 Bytes  JMP 016BCC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!WinExec                                                          769A5CF7 5 Bytes  JMP 016BCA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] kernel32.dll!LoadModule                                                       769A5E4F 5 Bytes  JMP 016BCD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] USER32.dll!EndTask                                                            773AAD32 5 Bytes  JMP 016BE3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ADVAPI32.dll!CreateProcessAsUserA                                             76F3CEB9 5 Bytes  JMP 016B6BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ADVAPI32.dll!CreateProcessAsUserW                                             76F51EE9 5 Bytes  JMP 016B62C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ADVAPI32.dll!OpenServiceA                                                     76F52EBD 7 Bytes  JMP 016BD590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ADVAPI32.dll!OpenServiceW                                                     76F58354 7 Bytes  JMP 016BD830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ADVAPI32.dll!CreateServiceW                                                   76F79EB4 7 Bytes  JMP 016BDAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ADVAPI32.dll!CreateServiceA                                                   76FB72A1 7 Bytes  JMP 016BDD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ole32.dll!CoGetClassObject                                                    76C9FAE8 5 Bytes  JMP 016BE600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] ole32.dll!CoCreateInstanceEx                                                  76CB9F81 5 Bytes  JMP 016BE840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] WININET.dll!InternetConnectA                                                  76B8DEAE 5 Bytes  JMP 016BC980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] WININET.dll!InternetConnectW                                                  76B8F862 5 Bytes  JMP 016BC960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] WS2_32.dll!WSASocketW                                                         758434EB 7 Bytes  JMP 016BC920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] WS2_32.dll!WSASocketA                                                         75848FA9 5 Bytes  JMP 016BC940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] SHELL32.dll!ShellExecuteW                                                     75889725 5 Bytes  JMP 016BC9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] SHELL32.dll!ShellExecuteExW                                                   758DC155 5 Bytes  JMP 016BC9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] SHELL32.dll!ShellExecuteEx                                                    75A8A292 5 Bytes  JMP 016BC9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\NewSoft\Presto! PVR\Monitor.exe[3972] SHELL32.dll!ShellExecuteA                                                     75A8A32D 5 Bytes  JMP 016BCA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!LdrLoadDll                                                771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!LdrUnloadDll                                              771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!LdrGetProcedureAddress                                    771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtAllocateVirtualMemory                                   77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtClose                                                   77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtCreateFile                                              77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtCreateProcess                                           772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtCreateProcessEx                                         772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtDeleteFile                                              77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtFreeVirtualMemory                                       77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtLoadDriver                                              772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtOpenFile                                                77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtProtectVirtualMemory                                    77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtSetInformationProcess                                   77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtUnloadDriver                                            772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!NtWriteVirtualMemory                                      772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ntdll.dll!RtlAllocateHeap                                           772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CreateProcessW                                         76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CreateProcessA                                         76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!VirtualProtect                                         76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!OpenFile                                               7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!MoveFileW                                              7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CopyFileExW                                            76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CopyFileW                                              76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!DeleteFileW                                            7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!DeleteFileA                                            7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!MoveFileWithProgressW                                  769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!MoveFileExW                                            769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!LoadLibraryExW                                         76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!LoadLibraryW                                           76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!LoadLibraryExA                                         769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!LoadLibraryA                                           769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!GetProcAddress                                         7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!GetModuleHandleA                                       769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!GetModuleHandleW                                       7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CreateFileW                                            7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CreateFileA                                            7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!MoveFileExA                                            76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!MoveFileWithProgressA                                  76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CopyFileA                                              76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!MoveFileA                                              7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!CopyFileExA                                            769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!WinExec                                                769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] kernel32.dll!LoadModule                                             769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ADVAPI32.dll!CreateProcessAsUserA                                   76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ADVAPI32.dll!CreateProcessAsUserW                                   76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ADVAPI32.dll!OpenServiceA                                           76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ADVAPI32.dll!OpenServiceW                                           76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ADVAPI32.dll!CreateServiceW                                         76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ADVAPI32.dll!CreateServiceA                                         76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] USER32.dll!EndTask                                                  773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ole32.dll!CoGetClassObject                                          76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Siano Mobile Silicon\SMS\SmsIRProcess.exe[3980] ole32.dll!CoCreateInstanceEx                                        76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!LdrLoadDll                                                    771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!LdrUnloadDll                                                  771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!LdrGetProcedureAddress                                        771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtAllocateVirtualMemory                                       77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtClose                                                       77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtCreateFile                                                  77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtCreateProcess                                               772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtCreateProcessEx                                             772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtDeleteFile                                                  77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtFreeVirtualMemory                                           77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtLoadDriver                                                  772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtOpenFile                                                    77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtProtectVirtualMemory                                        77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtSetInformationProcess                                       77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtUnloadDriver                                                772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!NtWriteVirtualMemory                                          772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ntdll.dll!RtlAllocateHeap                                               772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CreateProcessW                                             76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CreateProcessA                                             76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!VirtualProtect                                             76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!OpenFile                                                   7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!MoveFileW                                                  7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CopyFileExW                                                76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CopyFileW                                                  76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!DeleteFileW                                                7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!DeleteFileA                                                7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!MoveFileWithProgressW                                      769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!MoveFileExW                                                769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!LoadLibraryExW                                             76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!LoadLibraryW                                               76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!LoadLibraryExA                                             769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!LoadLibraryA                                               769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!GetProcAddress                                             7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!GetModuleHandleA                                           769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!GetModuleHandleW                                           7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CreateFileW                                                7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CreateFileA                                                7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!MoveFileExA                                                76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!MoveFileWithProgressA                                      76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CopyFileA                                                  76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!MoveFileA                                                  7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!CopyFileExA                                                769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!WinExec                                                    769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] kernel32.dll!LoadModule                                                 769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ADVAPI32.dll!CreateProcessAsUserA                                       76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ADVAPI32.dll!CreateProcessAsUserW                                       76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ADVAPI32.dll!OpenServiceA                                               76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ADVAPI32.dll!OpenServiceW                                               76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ADVAPI32.dll!CreateServiceW                                             76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ADVAPI32.dll!CreateServiceA                                             76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] USER32.dll!EndTask                                                      773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] WININET.dll!InternetConnectA                                            76B8DEAE 5 Bytes  JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] WININET.dll!InternetConnectW                                            76B8F862 5 Bytes  JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ole32.dll!CoGetClassObject                                              76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] ole32.dll!CoCreateInstanceEx                                            76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] SHELL32.dll!ShellExecuteW                                               75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] SHELL32.dll!ShellExecuteExW                                             758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] SHELL32.dll!ShellExecuteEx                                              75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\Microsoft Security Client\msseces.exe[3988] SHELL32.dll!ShellExecuteA                                               75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!LdrLoadDll                                                             771C93A8 5 Bytes  JMP 01B5A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!LdrUnloadDll                                                           771DB740 7 Bytes  JMP 01B4CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!LdrGetProcedureAddress                                                 771E57A0 5 Bytes  JMP 01B5CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtAllocateVirtualMemory                                                77203F84 5 Bytes  JMP 01B5CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtClose                                                                77204164 5 Bytes  JMP 01B4CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtCreateFile                                                           77204224 5 Bytes  JMP 01B5CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtCreateProcess                                                        772042E4 5 Bytes  JMP 01B5CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtCreateProcessEx                                                      772042F4 5 Bytes  JMP 01B5CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtDeleteFile                                                           77204604 5 Bytes  JMP 01B5CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtFreeVirtualMemory                                                    77204794 5 Bytes  JMP 01B5C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtLoadDriver                                                           772048B4 5 Bytes  JMP 01B5CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtOpenFile                                                             77204A04 5 Bytes  JMP 01B5CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtProtectVirtualMemory                                                 77204B84 5 Bytes  JMP 01B5C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtSetInformationProcess                                                77205174 5 Bytes  JMP 01B5CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtUnloadDriver                                                         772053C4 5 Bytes  JMP 01B5CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!NtWriteVirtualMemory                                                   772054C4 5 Bytes  JMP 01B5CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ntdll.dll!RtlAllocateHeap                                                        772063B0 5 Bytes  JMP 01B5C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CreateProcessW                                                      76911BF3 5 Bytes  JMP 01B57790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CreateProcessA                                                      76911C28 5 Bytes  JMP 01B58320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!VirtualProtect                                                      76911DC3 5 Bytes  JMP 01B5CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!OpenFile                                                            7691355A 5 Bytes  JMP 01B5CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!MoveFileW                                                           7691A2F2 5 Bytes  JMP 01B5CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CopyFileExW                                                         76920211 7 Bytes  JMP 01B5CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CopyFileW                                                           76920299 5 Bytes  JMP 01B5CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!DeleteFileW                                                         7692F4B6 5 Bytes  JMP 01B5CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!DeleteFileA                                                         7692F5D2 5 Bytes  JMP 01B5CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!MoveFileWithProgressW                                               769310A4 5 Bytes  JMP 01B5CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!MoveFileExW                                                         769310C8 5 Bytes  JMP 01B5CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!LoadLibraryExW                                                      76939109 7 Bytes  JMP 01B5CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!LoadLibraryW                                                        76939362 5 Bytes  JMP 01B5CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!LoadLibraryExA                                                      769394B4 5 Bytes  JMP 01B5CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!LoadLibraryA                                                        769394DC 5 Bytes  JMP 01B5CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!GetProcAddress                                                      7695903B 5 Bytes  JMP 01B5CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!GetModuleHandleA                                                    769592A5 5 Bytes  JMP 01B5CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!GetModuleHandleW                                                    7695A804 5 Bytes  JMP 01B5CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CreateFileW                                                         7695AECB 5 Bytes  JMP 01B5CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CreateFileA                                                         7695CE5F 5 Bytes  JMP 01B5CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!MoveFileExA                                                         76960F0A 5 Bytes  JMP 01B5CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!MoveFileWithProgressA                                               76960F2A 5 Bytes  JMP 01B5CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CopyFileA                                                           76962433 5 Bytes  JMP 01B5CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!MoveFileA                                                           7699F641 5 Bytes  JMP 01B5CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!CopyFileExA                                                         769A19F9 5 Bytes  JMP 01B5CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!WinExec                                                             769A5CF7 5 Bytes  JMP 01B5CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] kernel32.dll!LoadModule                                                          769A5E4F 5 Bytes  JMP 01B5CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ADVAPI32.dll!CreateProcessAsUserA                                                76F3CEB9 5 Bytes  JMP 01B56BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ADVAPI32.dll!CreateProcessAsUserW                                                76F51EE9 5 Bytes  JMP 01B562C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ADVAPI32.dll!OpenServiceA                                                        76F52EBD 7 Bytes  JMP 01B5D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ADVAPI32.dll!OpenServiceW                                                        76F58354 7 Bytes  JMP 01B5D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ADVAPI32.dll!CreateServiceW                                                      76F79EB4 7 Bytes  JMP 01B5DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ADVAPI32.dll!CreateServiceA                                                      76FB72A1 7 Bytes  JMP 01B5DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] USER32.dll!EndTask                                                               773AAD32 5 Bytes  JMP 01B5E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] SHELL32.dll!ShellExecuteW                                                        75889725 5 Bytes  JMP 01B5C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] SHELL32.dll!ShellExecuteExW                                                      758DC155 5 Bytes  JMP 01B5C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] SHELL32.dll!ShellExecuteEx                                                       75A8A292 5 Bytes  JMP 01B5C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] SHELL32.dll!ShellExecuteA                                                        75A8A32D 5 Bytes  JMP 01B5CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ole32.dll!CoGetClassObject                                                       76C9FAE8 5 Bytes  JMP 01B5E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\DAEMON Tools Lite\DTLite.exe[3996] ole32.dll!CoCreateInstanceEx                                                     76CB9F81 5 Bytes  JMP 01B5E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!LdrLoadDll                                                                               771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!LdrUnloadDll                                                                             771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!LdrGetProcedureAddress                                                                   771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtAllocateVirtualMemory                                                                  77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtClose                                                                                  77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtCreateFile                                                                             77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtCreateProcess                                                                          772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtCreateProcessEx                                                                        772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtDeleteFile                                                                             77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtFreeVirtualMemory                                                                      77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtLoadDriver                                                                             772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtOpenFile                                                                               77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtProtectVirtualMemory                                                                   77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtSetInformationProcess                                                                  77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtUnloadDriver                                                                           772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!NtWriteVirtualMemory                                                                     772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ntdll.dll!RtlAllocateHeap                                                                          772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CreateProcessW                                                                        76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CreateProcessA                                                                        76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!VirtualProtect                                                                        76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!OpenFile                                                                              7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!MoveFileW                                                                             7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CopyFileExW                                                                           76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CopyFileW                                                                             76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!DeleteFileW                                                                           7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!DeleteFileA                                                                           7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!MoveFileWithProgressW                                                                 769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!MoveFileExW                                                                           769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!LoadLibraryExW                                                                        76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!LoadLibraryW                                                                          76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!LoadLibraryExA                                                                        769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!LoadLibraryA                                                                          769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!GetProcAddress                                                                        7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!GetModuleHandleA                                                                      769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!GetModuleHandleW                                                                      7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CreateFileW                                                                           7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CreateFileA                                                                           7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!MoveFileExA                                                                           76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!MoveFileWithProgressA                                                                 76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CopyFileA                                                                             76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!MoveFileA                                                                             7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!CopyFileExA                                                                           769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!WinExec                                                                               769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] kernel32.dll!LoadModule                                                                            769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ADVAPI32.dll!CreateProcessAsUserA                                                                  76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ADVAPI32.dll!CreateProcessAsUserW                                                                  76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ADVAPI32.dll!OpenServiceA                                                                          76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ADVAPI32.dll!OpenServiceW                                                                          76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ADVAPI32.dll!CreateServiceW                                                                        76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ADVAPI32.dll!CreateServiceA                                                                        76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] USER32.dll!EndTask                                                                                 773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] SHELL32.dll!ShellExecuteW                                                                          75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] SHELL32.dll!ShellExecuteExW                                                                        758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] SHELL32.dll!ShellExecuteEx                                                                         75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] SHELL32.dll!ShellExecuteA                                                                          75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ole32.dll!CoGetClassObject                                                                         76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\ehome\ehtray.exe[4004] ole32.dll!CoCreateInstanceEx                                                                       76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!LdrLoadDll                                             771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!LdrUnloadDll                                           771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!LdrGetProcedureAddress                                 771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtAllocateVirtualMemory                                77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtClose                                                77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtCreateFile                                           77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtCreateProcess                                        772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtCreateProcessEx                                      772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtDeleteFile                                           77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtFreeVirtualMemory                                    77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtLoadDriver                                           772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtOpenFile                                             77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtProtectVirtualMemory                                 77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtSetInformationProcess                                77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtUnloadDriver                                         772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!NtWriteVirtualMemory                                   772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ntdll.dll!RtlAllocateHeap                                        772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CreateProcessW                                      76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CreateProcessA                                      76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!VirtualProtect                                      76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!OpenFile                                            7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!MoveFileW                                           7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CopyFileExW                                         76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CopyFileW                                           76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!DeleteFileW                                         7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!DeleteFileA                                         7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!MoveFileWithProgressW                               769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!MoveFileExW                                         769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!LoadLibraryExW                                      76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!LoadLibraryW                                        76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!LoadLibraryExA                                      769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!LoadLibraryA                                        769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!GetProcAddress                                      7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!GetModuleHandleA                                    769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!GetModuleHandleW                                    7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CreateFileW                                         7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CreateFileA                                         7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!MoveFileExA                                         76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!MoveFileWithProgressA                               76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CopyFileA                                           76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!MoveFileA                                           7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!CopyFileExA                                         769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!WinExec                                             769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] KERNEL32.dll!LoadModule                                          769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] USER32.dll!EndTask                                               773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ADVAPI32.dll!CreateProcessAsUserA                                76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ADVAPI32.dll!CreateProcessAsUserW                                76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ADVAPI32.dll!OpenServiceA                                        76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ADVAPI32.dll!OpenServiceW                                        76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ADVAPI32.dll!CreateServiceW                                      76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ADVAPI32.dll!CreateServiceA                                      76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] shell32.dll!ShellExecuteW                                        75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] shell32.dll!ShellExecuteExW                                      758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] shell32.dll!ShellExecuteEx                                       75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] shell32.dll!ShellExecuteA                                        75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ole32.dll!CoGetClassObject                                       76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] ole32.dll!CoCreateInstanceEx                                     76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] WININET.dll!InternetConnectA                                     76B8DEAE 5 Bytes  JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe[4052] WININET.dll!InternetConnectW                                     76B8F862 5 Bytes  JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!LdrLoadDll                                             771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!LdrUnloadDll                                           771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!LdrGetProcedureAddress                                 771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtAllocateVirtualMemory                                77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtClose                                                77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtCreateFile                                           77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtCreateProcess                                        772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtCreateProcessEx                                      772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtDeleteFile                                           77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtFreeVirtualMemory                                    77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtLoadDriver                                           772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtOpenFile                                             77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtProtectVirtualMemory                                 77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtSetInformationProcess                                77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtUnloadDriver                                         772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!NtWriteVirtualMemory                                   772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ntdll.dll!RtlAllocateHeap                                        772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CreateProcessW                                      76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CreateProcessA                                      76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!VirtualProtect                                      76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!OpenFile                                            7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!MoveFileW                                           7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CopyFileExW                                         76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CopyFileW                                           76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!DeleteFileW                                         7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!DeleteFileA                                         7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!MoveFileWithProgressW                               769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!MoveFileExW                                         769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!LoadLibraryExW                                      76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!LoadLibraryW                                        76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!LoadLibraryExA                                      769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!LoadLibraryA                                        769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!GetProcAddress                                      7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!GetModuleHandleA                                    769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!GetModuleHandleW                                    7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CreateFileW                                         7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CreateFileA                                         7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!MoveFileExA                                         76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!MoveFileWithProgressA                               76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CopyFileA                                           76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!MoveFileA                                           7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!CopyFileExA                                         769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!WinExec                                             769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] KERNEL32.dll!LoadModule                                          769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] USER32.dll!EndTask                                               773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ADVAPI32.dll!CreateProcessAsUserA                                76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ADVAPI32.dll!CreateProcessAsUserW                                76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ADVAPI32.dll!OpenServiceA                                        76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ADVAPI32.dll!OpenServiceW                                        76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ADVAPI32.dll!CreateServiceW                                      76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ADVAPI32.dll!CreateServiceA                                      76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] shell32.dll!ShellExecuteW                                        75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] shell32.dll!ShellExecuteExW                                      758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] shell32.dll!ShellExecuteEx                                       75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] shell32.dll!ShellExecuteA                                        75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ole32.dll!CoGetClassObject                                       76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe[4088] ole32.dll!CoCreateInstanceEx                                     76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!LdrLoadDll                                                                     771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!LdrUnloadDll                                                                   771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!LdrGetProcedureAddress                                                         771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtAllocateVirtualMemory                                                        77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtClose                                                                        77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtCreateFile                                                                   77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtCreateProcess                                                                772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtCreateProcessEx                                                              772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtDeleteFile                                                                   77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtFreeVirtualMemory                                                            77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtLoadDriver                                                                   772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtOpenFile                                                                     77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtProtectVirtualMemory                                                         77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtSetInformationProcess                                                        77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtUnloadDriver                                                                 772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!NtWriteVirtualMemory                                                           772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ntdll.dll!RtlAllocateHeap                                                                772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CreateProcessW                                                              76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CreateProcessA                                                              76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!VirtualProtect                                                              76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!OpenFile                                                                    7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!MoveFileW                                                                   7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CopyFileExW                                                                 76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CopyFileW                                                                   76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!DeleteFileW                                                                 7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!DeleteFileA                                                                 7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!MoveFileWithProgressW                                                       769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!MoveFileExW                                                                 769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!LoadLibraryExW                                                              76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!LoadLibraryW                                                                76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!LoadLibraryExA                                                              769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!LoadLibraryA                                                                769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!GetProcAddress                                                              7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!GetModuleHandleA                                                            769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!GetModuleHandleW                                                            7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CreateFileW                                                                 7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CreateFileA                                                                 7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!MoveFileExA                                                                 76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!MoveFileWithProgressA                                                       76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CopyFileA                                                                   76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!MoveFileA                                                                   7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!CopyFileExA                                                                 769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!WinExec                                                                     769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] kernel32.dll!LoadModule                                                                  769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ADVAPI32.dll!CreateProcessAsUserA                                                        76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ADVAPI32.dll!CreateProcessAsUserW                                                        76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ADVAPI32.dll!OpenServiceA                                                                76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ADVAPI32.dll!OpenServiceW                                                                76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ADVAPI32.dll!CreateServiceW                                                              76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ADVAPI32.dll!CreateServiceA                                                              76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] USER32.dll!EndTask                                                                       773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ole32.dll!CoGetClassObject                                                               76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] ole32.dll!CoCreateInstanceEx                                                             76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] WS2_32.dll!WSASocketW                                                                    758434EB 7 Bytes  JMP 1002C920 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\wbem\wmiprvse.exe[4408] WS2_32.dll!WSASocketA                                                                    75848FA9 5 Bytes  JMP 1002C940 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4628] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\system32\svchost.exe[4780] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!LdrLoadDll                                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!LdrUnloadDll                                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!LdrGetProcedureAddress                                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtAllocateVirtualMemory                                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtClose                                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtCreateFile                                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtCreateProcess                                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtCreateProcessEx                                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtDeleteFile                                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtFreeVirtualMemory                                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtLoadDriver                                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtOpenFile                                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtProtectVirtualMemory                                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtSetInformationProcess                                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtUnloadDriver                                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!NtWriteVirtualMemory                                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ntdll.dll!RtlAllocateHeap                                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CreateProcessW                                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CreateProcessA                                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!VirtualProtect                                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!OpenFile                                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!MoveFileW                                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CopyFileExW                                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CopyFileW                                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!DeleteFileW                                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!DeleteFileA                                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!MoveFileWithProgressW                                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!MoveFileExW                                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!LoadLibraryExW                                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!LoadLibraryW                                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!LoadLibraryExA                                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!LoadLibraryA                                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!GetProcAddress                                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!GetModuleHandleA                                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!GetModuleHandleW                                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CreateFileW                                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CreateFileA                                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!MoveFileExA                                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!MoveFileWithProgressA                                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CopyFileA                                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!MoveFileA                                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!CopyFileExA                                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!WinExec                                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] kernel32.dll!LoadModule                                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ADVAPI32.dll!CreateProcessAsUserA                                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ADVAPI32.dll!CreateProcessAsUserW                                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ADVAPI32.dll!OpenServiceA                                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ADVAPI32.dll!OpenServiceW                                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ADVAPI32.dll!CreateServiceW                                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ADVAPI32.dll!CreateServiceA                                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] USER32.dll!EndTask                                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ole32.dll!CoGetClassObject                                                                     76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] ole32.dll!CoCreateInstanceEx                                                                   76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] SHELL32.dll!ShellExecuteW                                                                      75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] SHELL32.dll!ShellExecuteExW                                                                    758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] SHELL32.dll!ShellExecuteEx                                                                     75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Windows\System32\mobsync.exe[4928] SHELL32.dll!ShellExecuteA                                                                      75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!LdrLoadDll                                                                                  771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!LdrUnloadDll                                                                                771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!LdrGetProcedureAddress                                                                      771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtAllocateVirtualMemory                                                                     77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtClose                                                                                     77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtCreateFile                                                                                77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtCreateProcess                                                                             772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtCreateProcessEx                                                                           772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtDeleteFile                                                                                77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtFreeVirtualMemory                                                                         77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtLoadDriver                                                                                772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtOpenFile                                                                                  77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtProtectVirtualMemory                                                                      77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtSetInformationProcess                                                                     77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtUnloadDriver                                                                              772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!NtWriteVirtualMemory                                                                        772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ntdll.dll!RtlAllocateHeap                                                                             772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CreateProcessW                                                                           76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CreateProcessA                                                                           76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!VirtualProtect                                                                           76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!OpenFile                                                                                 7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!MoveFileW                                                                                7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CopyFileExW                                                                              76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CopyFileW                                                                                76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!DeleteFileW                                                                              7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!DeleteFileA                                                                              7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!MoveFileWithProgressW                                                                    769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!MoveFileExW                                                                              769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!LoadLibraryExW                                                                           76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!LoadLibraryW                                                                             76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!LoadLibraryExA                                                                           769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!LoadLibraryA                                                                             769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!GetProcAddress                                                                           7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!GetModuleHandleA                                                                         769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!GetModuleHandleW                                                                         7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CreateFileW                                                                              7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CreateFileA                                                                              7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!MoveFileExA                                                                              76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!MoveFileWithProgressA                                                                    76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CopyFileA                                                                                76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!MoveFileA                                                                                7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!CopyFileExA                                                                              769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!WinExec                                                                                  769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] kernel32.dll!LoadModule                                                                               769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] user32.dll!EndTask                                                                                    773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ADVAPI32.dll!CreateProcessAsUserA                                                                     76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ADVAPI32.dll!CreateProcessAsUserW                                                                     76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ADVAPI32.dll!OpenServiceA                                                                             76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ADVAPI32.dll!OpenServiceW                                                                             76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ADVAPI32.dll!CreateServiceW                                                                           76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ADVAPI32.dll!CreateServiceA                                                                           76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] shell32.dll!ShellExecuteW                                                                             75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] shell32.dll!ShellExecuteExW                                                                           758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] shell32.dll!ShellExecuteEx                                                                            75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] shell32.dll!ShellExecuteA                                                                             75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ole32.dll!CoGetClassObject                                                                            76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\totalcmd\TOTALCMD.EXE[5180] ole32.dll!CoCreateInstanceEx                                                                          76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!LdrLoadDll                                                           771C93A8 5 Bytes  JMP 1002A630 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!LdrUnloadDll                                                         771DB740 7 Bytes  JMP 1001CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!LdrGetProcedureAddress                                               771E57A0 5 Bytes  JMP 1002CD40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtAllocateVirtualMemory                                              77203F84 5 Bytes  JMP 1002CE00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtClose                                                              77204164 5 Bytes  JMP 1001CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtCreateFile                                                         77204224 5 Bytes  JMP 1002CDC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtCreateProcess                                                      772042E4 5 Bytes  JMP 1002CE80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtCreateProcessEx                                                    772042F4 5 Bytes  JMP 1002CE60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtDeleteFile                                                         77204604 5 Bytes  JMP 1002CE20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtFreeVirtualMemory                                                  77204794 5 Bytes  JMP 1002C490 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtLoadDriver                                                         772048B4 5 Bytes  JMP 1002CDE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtOpenFile                                                           77204A04 5 Bytes  JMP 1002CDA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtProtectVirtualMemory                                               77204B84 5 Bytes  JMP 1002C440 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtSetInformationProcess                                              77205174 5 Bytes  JMP 1002CD60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtUnloadDriver                                                       772053C4 5 Bytes  JMP 1002CD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!NtWriteVirtualMemory                                                 772054C4 5 Bytes  JMP 1002CE40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ntdll.dll!RtlAllocateHeap                                                      772063B0 5 Bytes  JMP 1002C4E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CreateProcessW                                                    76911BF3 5 Bytes  JMP 10027790 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CreateProcessA                                                    76911C28 5 Bytes  JMP 10028320 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!VirtualProtect                                                    76911DC3 5 Bytes  JMP 1002CA20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!OpenFile                                                          7691355A 5 Bytes  JMP 1002CCA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!MoveFileW                                                         7691A2F2 5 Bytes  JMP 1002CBA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CopyFileExW                                                       76920211 7 Bytes  JMP 1002CBE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CopyFileW                                                         76920299 5 Bytes  JMP 1002CC20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!DeleteFileW                                                       7692F4B6 5 Bytes  JMP 1002CAE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!DeleteFileA                                                       7692F5D2 5 Bytes  JMP 1002CB00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!MoveFileWithProgressW                                             769310A4 5 Bytes  JMP 1002CB20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!MoveFileExW                                                       769310C8 5 Bytes  JMP 1002CB60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!LoadLibraryExW                                                    76939109 7 Bytes  JMP 1002CCC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!LoadLibraryW                                                      76939362 5 Bytes  JMP 1002CA60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!LoadLibraryExA                                                    769394B4 5 Bytes  JMP 1002CCE0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!LoadLibraryA                                                      769394DC 5 Bytes  JMP 1002CA80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!GetProcAddress                                                    7695903B 5 Bytes  JMP 1002CD20 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!GetModuleHandleA                                                  769592A5 5 Bytes  JMP 1002CAC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!GetModuleHandleW                                                  7695A804 5 Bytes  JMP 1002CAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CreateFileW                                                       7695AECB 5 Bytes  JMP 1002CC60 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CreateFileA                                                       7695CE5F 5 Bytes  JMP 1002CC80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!MoveFileExA                                                       76960F0A 5 Bytes  JMP 1002CB80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!MoveFileWithProgressA                                             76960F2A 5 Bytes  JMP 1002CB40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CopyFileA                                                         76962433 5 Bytes  JMP 1002CC40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!MoveFileA                                                         7699F641 5 Bytes  JMP 1002CBC0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!CopyFileExA                                                       769A19F9 5 Bytes  JMP 1002CC00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!WinExec                                                           769A5CF7 5 Bytes  JMP 1002CA40 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] kernel32.dll!LoadModule                                                        769A5E4F 5 Bytes  JMP 1002CD00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] USER32.dll!EndTask                                                             773AAD32 5 Bytes  JMP 1002E3C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ADVAPI32.dll!CreateProcessAsUserA                                              76F3CEB9 5 Bytes  JMP 10026BF0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ADVAPI32.dll!CreateProcessAsUserW                                              76F51EE9 5 Bytes  JMP 100262C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ADVAPI32.dll!OpenServiceA                                                      76F52EBD 7 Bytes  JMP 1002D590 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ADVAPI32.dll!OpenServiceW                                                      76F58354 7 Bytes  JMP 1002D830 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ADVAPI32.dll!CreateServiceW                                                    76F79EB4 7 Bytes  JMP 1002DAA0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ADVAPI32.dll!CreateServiceA                                                    76FB72A1 7 Bytes  JMP 1002DD80 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] shell32.dll!ShellExecuteW                                                      75889725 5 Bytes  JMP 1002C9E0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] shell32.dll!ShellExecuteExW                                                    758DC155 5 Bytes  JMP 1002C9A0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] shell32.dll!ShellExecuteEx                                                     75A8A292 5 Bytes  JMP 1002C9C0 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] shell32.dll!ShellExecuteA                                                      75A8A32D 5 Bytes  JMP 1002CA00 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ole32.dll!CoGetClassObject                                                     76C9FAE8 5 Bytes  JMP 1002E600 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] ole32.dll!CoCreateInstanceEx                                                   76CB9F81 5 Bytes  JMP 1002E840 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] WININET.dll!InternetConnectA                                                   76B8DEAE 5 Bytes  JMP 1002C980 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)
.text           C:\Users\Milan\Desktop\instalaky\gmer\gmer.exe[5756] WININET.dll!InternetConnectW                                                   76B8F862 5 Bytes  JMP 1002C960 C:\Windows\system32\guard32.dll (COMODO Internet Security/COMODO)

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortUchar]                                                            [806976D6] \SystemRoot\System32\Drivers\splj.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUchar]                                                             [80697042] \SystemRoot\System32\Drivers\splj.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortWritePortBufferUshort]                                                     [80697800] \SystemRoot\System32\Drivers\splj.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortUshort]                                                            [806970C0] \SystemRoot\System32\Drivers\splj.sys
IAT             \SystemRoot\system32\drivers\atapi.sys[ataport.SYS!AtaPortReadPortBufferUshort]                                                      [8069713E] \SystemRoot\System32\Drivers\splj.sys
IAT             \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR]                                                                   [806A6B90] \SystemRoot\System32\Drivers\splj.sys
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortNotification]                                                           CC358B04
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortWritePortUchar]                                                         8383BA1F
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortWritePortUlong]                                                         458B38C6
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortGetPhysicalAddress]                                                     A5A5A514
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortConvertPhysicalAddressToUlong]                                          [100D8BA5] \Program Files\DAEMON Tools Lite\Engine.dll (Helper library/DT Soft Ltd)
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortGetScatterGatherList]                                                   5F83B9F0
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortReadPortUchar]                                                          30810889
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortStallExecution]                                                         54771129
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortGetParentBusType]                                                       10C25D5E
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortRequestCallback]                                                        8B55CC00
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortWritePortBufferUshort]                                                  084D8BEC
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortGetUnCachedExtension]                                                   0CF0918B
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortCompleteRequest]                                                        458B0000
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortMoveMemory]                                                             8B108910
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortCompleteAllActiveRequests]                                              000CF491
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortReleaseRequestSenseIrb]                                                 04508900
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortBuildRequestSenseIrb]                                                   053C7980
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortReadPortUshort]                                                         560C558B
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortReadPortBufferUshort]                                                   C6127557
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortInitialize]                                                             B18D0502
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortGetDeviceBase]                                                          00000CF8
IAT             \SystemRoot\System32\Drivers\ay1kq56c.SYS[ataport.SYS!AtaPortDeviceStateChange]                                                      A508788D

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\IPHLPAPI.DLL [KERNEL32.dll!LoadLibraryA]        [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress]      [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress]        [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA]          [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW]          [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetModuleHandleA]      [0058D260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateThread]          [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress]      [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryA]        [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetModuleHandleA]    [0058D260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryExW]      [0058D1E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!CreateThread]        [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!LoadLibraryW]        [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress]        [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryA]          [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!LoadLibraryW]          [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!CreateThread]          [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetModuleHandleA]      [0058D260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!CreateThread]          [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!GetProcAddress]        [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryA]          [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryExW]        [0058D1E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\WS2_32.dll [KERNEL32.dll!LoadLibraryW]          [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryA]         [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!LoadLibraryW]         [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress]       [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW]         [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateThread]         [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetModuleHandleA]     [0058D260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW]       [0058D1E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA]         [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress]       [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [GDI32.dll!DeleteObject]            [0058BFA0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!GetSysColor]            [0058BF40] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!RegisterClassW]         [0058C990] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!RegisterClassA]         [0058C8D0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DefWindowProcW]         [0058C430] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!DefWindowProcA]         [0058C3A0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!GetSystemMetrics]       [0058CA50] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW]       [0058D1E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateThread]         [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetProcAddress]       [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW]         [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA]         [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [GDI32.dll!DeleteObject]            [0058BFA0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!AdjustWindowRectEx]     [0058CD10] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!CallWindowProcW]        [0058C260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetScrollInfo]          [0058C1F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!SystemParametersInfoW]  [0058CBD0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!DrawEdge]               [0058CED0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!DrawFrameControl]       [0058CF20] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSysColorBrush]       [0058BFF0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSysColor]            [0058BF40] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!RegisterClassW]         [0058C990] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!FillRect]               [0058CE50] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!DefWindowProcW]         [0058C430] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!GetSystemMetrics]       [0058CA50] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\SHELL32.dll [USER32.dll!SetScrollInfo]          [0058C0E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [GDI32.dll!DeleteObject]              [0058BFA0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateThread]           [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW]         [0058D1E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW]           [0058D160] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA]           [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetProcAddress]         [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [USER32.dll!SystemParametersInfoW]    [0058CBD0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [USER32.dll!GetSystemMetrics]         [0058CA50] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [USER32.dll!GetSysColor]              [0058BF40] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [USER32.dll!CallWindowProcW]          [0058C260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [USER32.dll!RegisterClassW]           [0058C990] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\ole32.dll [USER32.dll!DefWindowProcW]           [0058C430] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!CreateThread]         [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress]       [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!LoadLibraryA]         [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress]       [0058D2F0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryA]         [0058D120] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!CreateThread]         [0058C840] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!LoadLibraryExW]       [0058D1E0] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
IAT             C:\Program Files\COMODO\COMODO Internet Security\cfp.exe[3940] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetModuleHandleA]     [0058D260] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)

---- Devices - GMER 1.0.15 ----

Device          \FileSystem\Ntfs \Ntfs                                                                                                               86F001F8

AttachedDevice  \Driver\kbdclass \Device\KeyboardClass0                                                                                              VMkbd.sys
AttachedDevice  \Driver\kbdclass \Device\KeyboardClass1                                                                                              VMkbd.sys

Device          \Driver\volmgr \Device\VolMgrControl                                                                                                 86EFC1F8
Device          \Driver\usbuhci \Device\USBPDO-0                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBPDO-0                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBPDO-1                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBPDO-1                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBPDO-2                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBPDO-2                                                                                                     hcmon.sys
Device          \Driver\netbt \Device\NetBT_Tcpip_{B34111F9-934E-414C-A437-0D91D4D067C2}                                                             886A41F8
Device          \Driver\usbehci \Device\USBPDO-3                                                                                                     880361F8
Device          \Driver\usbehci \Device\USBPDO-3                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBPDO-4                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBPDO-4                                                                                                     hcmon.sys

AttachedDevice  \Driver\tdx \Device\Tcp                                                                                                              cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)

Device          \Driver\usbuhci \Device\USBPDO-5                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBPDO-5                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBPDO-6                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBPDO-6                                                                                                     hcmon.sys
Device          \Driver\volmgr \Device\HarddiskVolume1                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume1                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\usbehci \Device\USBPDO-7                                                                                                     880361F8
Device          \Driver\usbehci \Device\USBPDO-7                                                                                                     hcmon.sys
Device          \Driver\usbhub \Device\00000071                                                                                                      hcmon.sys
Device          \Driver\volmgr \Device\HarddiskVolume2                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume2                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\cdrom \Device\CdRom0                                                                                                         880AF1F8
Device          \Driver\usbhub \Device\00000072                                                                                                      hcmon.sys
Device          \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-0                                                                                          86EFE1F8
Device          \Driver\atapi \Device\Ide\IdePort0                                                                                                   86EFE1F8
Device          \Driver\atapi \Device\Ide\IdePort1                                                                                                   86EFE1F8
Device          \Driver\atapi \Device\Ide\IdePort2                                                                                                   86EFE1F8
Device          \Driver\atapi \Device\Ide\IdePort3                                                                                                   86EFE1F8
Device          \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-1                                                                                          86EFE1F8
Device          \Driver\atapi \Device\Ide\IdeDeviceP3T0L0-4                                                                                          86EFE1F8
Device          \Driver\volmgr \Device\HarddiskVolume3                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume3                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\cdrom \Device\CdRom1                                                                                                         880AF1F8
Device          \Driver\usbhub \Device\USBPDO-9                                                                                                      hcmon.sys
Device          \Driver\usbhub \Device\00000073                                                                                                      hcmon.sys
Device          \Driver\volmgr \Device\HarddiskVolume4                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume4                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\usbhub \Device\00000074                                                                                                      hcmon.sys
Device          \Driver\volmgr \Device\HarddiskVolume5                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume5                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\usbhub \Device\00000075                                                                                                      hcmon.sys
Device          \Driver\volmgr \Device\HarddiskVolume6                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume6                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\usbhub \Device\00000076                                                                                                      hcmon.sys
Device          \Driver\volmgr \Device\HarddiskVolume7                                                                                               86EFC1F8

AttachedDevice  \Driver\volmgr \Device\HarddiskVolume7                                                                                               hotcore3.sys (A part of Paragon System Utilities/Paragon Software Group)

Device          \Driver\netbt \Device\NetBt_Wins_Export                                                                                              886A41F8
Device          \Driver\usbhub \Device\00000077                                                                                                      hcmon.sys
Device          \Driver\usbhub \Device\00000078                                                                                                      hcmon.sys
Device          \Driver\sptd \Device\1822019423                                                                                                      splj.sys
Device          \Driver\Smb \Device\NetbiosSmb                                                                                                       887691F8
Device          \Driver\iScsiPrt \Device\RaidPort0                                                                                                   880B61F8

AttachedDevice  \Driver\tdx \Device\Udp                                                                                                              cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice  \Driver\tdx \Device\RawIp                                                                                                            cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)

Device          \Driver\PCI_PNP7411 \Device\0000005f                                                                                                 splj.sys
Device          \Driver\usbuhci \Device\USBFDO-0                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBFDO-0                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBFDO-1                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBFDO-1                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBFDO-2                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBFDO-2                                                                                                     hcmon.sys
Device          \Driver\usbehci \Device\USBFDO-3                                                                                                     880361F8
Device          \Driver\usbehci \Device\USBFDO-3                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBFDO-4                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBFDO-4                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBFDO-5                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBFDO-5                                                                                                     hcmon.sys
Device          \Driver\usbuhci \Device\USBFDO-6                                                                                                     869FC500
Device          \Driver\usbuhci \Device\USBFDO-6                                                                                                     hcmon.sys
Device          \Driver\usbehci \Device\USBFDO-7                                                                                                     880361F8
Device          \Driver\usbehci \Device\USBFDO-7                                                                                                     hcmon.sys
Device          \Driver\JRAID \Device\Scsi\JRAID1Port4Path0Target0Lun0                                                                               86EFF1F8
Device          \Driver\JRAID \Device\Scsi\JRAID1                                                                                                    86EFF1F8
Device          \Driver\ay1kq56c \Device\Scsi\ay1kq56c1                                                                                              88055500
Device          \Driver\ay1kq56c \Device\Scsi\ay1kq56c1Port6Path0Target0Lun0                                                                         88055500
Device          \FileSystem\cdfs \Cdfs                                                                                                               892F31F8

---- Registry - GMER 1.0.15 ----

Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1                                                                                   771343423
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2                                                                                   285507792
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0                                                                                   2
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC                                                     
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                                  C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                                  0x00 0x00 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                                  1
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                               0xF4 0xC9 0x0F 0x33 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001                                            
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                         0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                                      0x0E 0x4F 0x87 0x6D ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0                                       
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                                 0x90 0xFA 0x51 0x28 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4                                                     
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                                  C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                                  0
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                                               0x66 0xBB 0xBA 0x0D ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001                                            
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                                         0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                                      0x12 0xFA 0x24 0x6D ...
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40                                      
Reg             HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                                0x82 0xBE 0xEC 0x24 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC (not active ControlSet)                                 
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@p0                                                      C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@u0                                                      0x00 0x00 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@h0                                                      1
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC@hdf12                                                   0x2F 0x9D 0x4D 0x2D ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001 (not active ControlSet)                        
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@a0                                             0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001@hdf12                                          0x0E 0x4F 0x87 0x6D ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0 (not active ControlSet)                   
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\14919EA49A8F3B4AA3CF1058D9A64CEC\00000001\gdq0@hdf12                                     0x90 0xFA 0x51 0x28 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)                                 
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0                                                      C:\Program Files\DAEMON Tools Lite\
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0                                                      0
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh                                                   0x66 0xBB 0xBA 0x0D ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)                        
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0                                             0x20 0x01 0x00 0x00 ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh                                          0x12 0xFA 0x24 0x6D ...
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)                  
Reg             HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh                                    0x82 0xBE 0xEC 0x24 ...
Reg             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Media Center\Service\Scheduler@Heartbeat                                              0x30 0x90 0xAA 0xC5 ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32@cd042efbbd7f7af1647644e76e06692b                   0xC8 0x28 0x51 0xAF ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32@bca643cdc5c2726b20d2ecedcc62c59b                   0x71 0x3B 0x04 0x66 ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32@2c81e34222e8052573023a60d06dd016                   0x7A 0x45 0x05 0xFD ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32@2582ae41fb52324423be06337561aa48                   0x6B 0x65 0x49 0x6A ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32@caaeda5fd7a9ed7697d9686d4b818472                   0xCD 0x44 0xCD 0xB9 ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32@a4a1bcf2cc2b8bc3716b74b2b4522f5d                   0x50 0x93 0xE5 0xAB ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32@4d370831d2c43cd13623e232fed27b7b                   0x31 0x77 0xE1 0xBA ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32@1d68fe701cdea33e477eb204b76f993d                   0x01 0x3A 0x48 0xFC ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32@1fac81b91d8e3c5aa4b0a51804d844a3                   0xF6 0x0F 0x4E 0x58 ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32@f5f62a6129303efb32fbe080bb27835b                   0xB1 0xCD 0x45 0x5A ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32@fd4e2e1a3940b94dceb5a6a021f2e3c6                   0x2A 0xB7 0xCC 0xB5 ...
Reg             HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32                                                    
Reg             HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@ThreadingModel                                     Apartment
Reg             HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@                                                   C:\Windows\system32\OLE32.DLL
Reg             HKLM\SOFTWARE\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32@8a8aec57dd6508a385616fbc86791ec2                   0x6C 0x43 0x2D 0x1E ...

---- Disk sectors - GMER 1.0.15 ----

Disk            \Device\Harddisk0\DR0                                                                                                                sector 09: copy of MBR

---- EOF - GMER 1.0.15 ----
