[XueTr][-->Ring3 Hook]: 105
Hooked Object		Hook Address and Location		Type		Current Value		Original Value
[*][3584(0x83BE6990)]firefox.exe--->len(5) ntdll.dll->LdrLoadDll		0x7C91632D->0x0126C930[C:\Program Files\Mozilla Firefox\xul.dll]		inline		E9 FE 65 95 84		68 6C 02 00 00
[*][3584(0x83BE6990)]firefox.exe--->len(5) kernel32.dll->MapViewOfFile		0x7C80B9A5->0x0149E083[C:\Program Files\Mozilla Firefox\xul.dll]		inline		E9 D9 26 C9 84		8B FF 55 8B EC
[*][3584(0x83BE6990)]firefox.exe--->len(5) kernel32.dll->VirtualAlloc		0x7C809AF1->0x0149E0AA[C:\Program Files\Mozilla Firefox\xul.dll]		inline		E9 B4 45 C9 84		8B FF 55 8B EC
[*][3584(0x83BE6990)]firefox.exe--->len(5) GDI32.dll->CreateDIBSection		0x77F19E19->0x0149E00D[C:\Program Files\Mozilla Firefox\xul.dll]		inline		E9 EF 41 58 89		8B FF 55 8B EC
[1528(0x89509DA0)]explorer.exe--->Explorer.EXE->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->Explorer.EXE->SHELL32.dll:[Ordinal:518]		0x7C9C0000->0x7CA40226[C:\WINDOWS\system32\SHELL32.dll]		Iat		26 02 A4 7C		00 00 9C 7C
[1528(0x89509DA0)]explorer.exe--->ADVAPI32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->RPCRT4.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->Secur32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->BROWSEUI.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->GDI32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->USER32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->msvcrt.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->ole32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->SHLWAPI.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->OLEAUT32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->SHDOCVW.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->CRYPT32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->MSASN1.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->CRYPTUI.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->NETAPI32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->VERSION.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WININET.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->urlmon.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->iertutil.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WINTRUST.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->IMAGEHLP.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WLDAP32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->SHELL32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->UxTheme.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WINMM.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->MSACM32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->USERENV.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->IMM32.DLL->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->comctl32.dll[WinSxs]->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->comctl32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->apphelp.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->msctfime.ime->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->CLBCATQ.DLL->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->cscui.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->CSCDLL.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->themeui.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->msutb.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->MSCTF.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->LINKINFO.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->ntshrui.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->ATL.DLL->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->ieframe.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->msi.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WPDShServiceObj.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->WINHTTP.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->webcheck.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->MLANG.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->btncopy.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->stobject.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->BatMeter.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->SETUPAPI.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->WTSAPI32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->mydocs.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->PortableDeviceTypes.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->PortableDeviceApi.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->wdmaud.drv->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->NETSHELL.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->credui.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->eappcfg.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->iphlpapi.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->WS2_32.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WS2HELP.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->ETDApix.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->WINSPOOL.DRV->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->rsaenh.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->WZCSAPI.DLL->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->wzcdlg.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->btmmhook.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->MPR.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->ntlanman.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->NETUI0.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->davclnt.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->zipfldr.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->zipfldr.dll->SHLWAPI.dll:[Ordinal:486]		0x77F6C2A7->0x77FC020B[C:\WINDOWS\system32\SHLWAPI.dll]		Iat		0B 02 FC 77		A7 C2 F6 77
[*][1528(0x89509DA0)]explorer.exe--->NavShExt.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->MSVCR90.dll[WinSxs]->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->ccL110U.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->ccVrTrst.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->EFACli.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][1528(0x89509DA0)]explorer.exe--->ccSet.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->wuapi.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[1528(0x89509DA0)]explorer.exe--->DUSER.dll->KERNEL32.dll:GetProcAddress		0x7C80AE40->0x5D067774[C:\WINDOWS\system32\ShimEng.dll]		Iat		74 77 06 5D		40 AE 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->USER32.DLL:MessageBoxA		0x7E3A07EA->0x6C2B5290[C:\Program Files\Norton Internet Security\Engine\19.7.0.9\cltLMS.dll]		Iat		90 52 2B 6C		EA 07 3A 7E
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:GetModuleHandleA		0x7C80B741->0x7C80AE40[C:\WINDOWS\system32\kernel32.dll]		Iat		40 AE 80 7C		41 B7 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:VirtualProtect		0x7C801AD4->0x7C80B741[C:\WINDOWS\system32\kernel32.dll]		Iat		41 B7 80 7C		D4 1A 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:VirtualFree		0x7C809B84->0x7C801D7B[C:\WINDOWS\system32\kernel32.dll]		Iat		7B 1D 80 7C		84 9B 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:GetProcAddress		0x7C80AE40->0x7C809AF1[C:\WINDOWS\system32\kernel32.dll]		Iat		F1 9A 80 7C		40 AE 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:LoadLibraryA		0x7C801D7B->0x7C809B84[C:\WINDOWS\system32\kernel32.dll]		Iat		84 9B 80 7C		7B 1D 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:VirtualAlloc		0x7C809AF1->0x7C801AD4[C:\WINDOWS\system32\kernel32.dll]		Iat		D4 1A 80 7C		F1 9A 80 7C
[*][280(0x8AA8B588)]ccsvchst.exe--->cltLMS.dll->KERNEL32.DLL:ExitProcess		0x7C81CB12->0x6C2B5293[C:\Program Files\Norton Internet Security\Engine\19.7.0.9\cltLMS.dll]		Iat		93 52 2B 6C		12 CB 81 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->USER32.DLL:MessageBoxA		0x7E3A07EA->0x6C2B5290[C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\19.7.0.9\CLTLMS.DLL]		Iat		90 52 2B 6C		EA 07 3A 7E
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:GetModuleHandleA		0x7C80B741->0x7C80AE40[C:\WINDOWS\system32\kernel32.dll]		Iat		40 AE 80 7C		41 B7 80 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:VirtualProtect		0x7C801AD4->0x7C80B741[C:\WINDOWS\system32\kernel32.dll]		Iat		41 B7 80 7C		D4 1A 80 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:VirtualFree		0x7C809B84->0x7C801D7B[C:\WINDOWS\system32\kernel32.dll]		Iat		7B 1D 80 7C		84 9B 80 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:GetProcAddress		0x7C80AE40->0x7C809AF1[C:\WINDOWS\system32\kernel32.dll]		Iat		F1 9A 80 7C		40 AE 80 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:LoadLibraryA		0x7C801D7B->0x7C809B84[C:\WINDOWS\system32\kernel32.dll]		Iat		84 9B 80 7C		7B 1D 80 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:VirtualAlloc		0x7C809AF1->0x7C801AD4[C:\WINDOWS\system32\kernel32.dll]		Iat		D4 1A 80 7C		F1 9A 80 7C
[*][660(0x8AAE4C00)]ccsvchst.exe--->CLTLMS.DLL->KERNEL32.DLL:ExitProcess		0x7C81CB12->0x6C2B5293[C:\PROGRAM FILES\NORTON INTERNET SECURITY\ENGINE\19.7.0.9\CLTLMS.DLL]		Iat		93 52 2B 6C		12 CB 81 7C
[*][1552(0x859A4020)]XueTr.exe--->len(5) kernel32.dll->LoadLibraryExW		0x7C801AF5->0x00408A80[C:\Documents and Settings\Nikola\Plocha\XueTr\XueTr.exe]		inline		E9 86 6F C0 83		6A 34 68 F8 E0
