PC Hunter Free --- Computer Examination Report
Examination Date: 2013-02-21 18:11
OS Information: Microsoft Windows 7 Ultimate Edition Service Pack 1 (build 7601), 64-bit
Internet Explorer: 9.0.8112.16421

Examination Items:
      Process
      Process Modules
      Process Threads
      Kernel Module
      Notify Routine
      Filter
      DPC Timer
      Worker Thread
      HalDispatchTable
      HalPrivateDispatchTable
      HalAcpiDispatchTable
      System Debug
      Object Hijack
      Direct IO
      GDT
      SSDT
      Shadow SSDT
      FSD
      Keyboard
      Mouclass
      Classpnp
      Atapi
      Acpi
      Scsi
      Kernel Hook
      PTE HOOK
      Object Type
      IDT
      Message Hook
      Process Hook
      KernelCallbackTable
      Port
      Tcpip
      Nsiproxy
      Tdx
      Ndis Handler
      IE Plugin
      IE Shell
      Spi
      Hosts File
      Startup
      Service
      Schedule Task
      File Association
      IFEO
      IME
      Firewall Rule
      Scan MBR Rootkit

==========================================================================================

Process

       System - System - 
       lsm.exe - C:\Windows\System32\lsm.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - ????(??)????????
       csrss.exe - C:\Windows\System32\csrss.exe - Microsoft Corporation
       smss.exe - C:\Windows\System32\smss.exe - Microsoft Corporation
       winlogon.exe - C:\Windows\System32\winlogon.exe - Microsoft Corporation
       nvSCPAPISvr.exe - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - NVIDIA Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       explorer.exe - C:\Windows\explorer.exe - Microsoft Corporation
       csrss.exe - C:\Windows\System32\csrss.exe - Microsoft Corporation
       wininit.exe - C:\Windows\System32\wininit.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       services.exe - C:\Windows\System32\services.exe - Microsoft Corporation
       lsass.exe - C:\Windows\System32\lsass.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       sppsvc.exe - C:\Windows\System32\sppsvc.exe - Microsoft Corporation
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
       nvvsvc.exe - C:\Windows\System32\nvvsvc.exe - NVIDIA Corporation
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       taskhost.exe - C:\Windows\System32\taskhost.exe - Microsoft Corporation
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       audiodg.exe - C:\Windows\System32\audiodg.exe - Microsoft Corporation
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       postak.exe - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\postak.exe - 
       dwm.exe - C:\Windows\System32\dwm.exe - Microsoft Corporation
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       RaUI.exe - C:\Program Files (x86)\EDIMAX\Common\RaUI.exe - Edimax Technology Co., Ltd.
       mdm.exe - C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe - Microsoft Corporation
       WmiPrvSE.exe - C:\Windows\System32\wbem\WmiPrvSE.exe - Microsoft Corporation
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       spoolsv.exe - C:\Windows\System32\spoolsv.exe - Microsoft Corporation
       avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       armsvc.exe - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - Adobe Systems Incorporated
       nvxdsync.exe - C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - NVIDIA Corporation
       nvvsvc.exe - C:\Windows\System32\nvvsvc.exe - NVIDIA Corporation
       HPSIsvc.exe - C:\Windows\System32\HPSIsvc.exe - HP
       nusb3mon.exe - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe - NEC Electronics Corporation
       taskeng.exe - C:\Windows\System32\taskeng.exe - Microsoft Corporation
       taskeng.exe - C:\Windows\System32\taskeng.exe - Microsoft Corporation
       PnkBstrA.exe - C:\Windows\SysWOW64\PnkBstrA.exe - 
       szninstall.exe - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\szninstall.exe - 
       PsiService_2.exe - C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe - Protexis Inc.
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - Microsoft Corporation
       RalinkRegistryWriter.exe - C:\Program Files (x86)\EDIMAX\Common\RalinkRegistryWriter.exe - 
       svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
       GoogleCrashHandler.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe - Google Inc.
       GoogleCrashHandler64.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe - Google Inc.
       nvtray.exe - C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - NVIDIA Corporation
       SearchFilterHost.exe - C:\Windows\System32\SearchFilterHost.exe - Microsoft Corporation
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       jusched.exe - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Sun Microsystems, Inc.
       SearchIndexer.exe - C:\Windows\System32\SearchIndexer.exe - Microsoft Corporation
       WmiPrvSE.exe - C:\Windows\System32\wbem\WmiPrvSE.exe - Microsoft Corporation
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
       Idle - Idle - 

==========================================================================================

Process Modules

      Image File Name[System]Modules
             ntdll.dll - C:\Windows\System32\ntdll.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[lsm.exe]Modules
             lsm.exe - C:\Windows\system32\lsm.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             SYSNTFY.dll - C:\Windows\system32\SYSNTFY.dll - Microsoft Corporation
             WMsgAPI.dll - C:\Windows\system32\WMsgAPI.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\system32\pcwum.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             rpcepmap.dll - c:\windows\system32\rpcepmap.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             rpcss.dll - c:\windows\system32\rpcss.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             user32.dll - C:\Windows\system32\user32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\system32\FirewallAPI.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\system32\fwpuclnt.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\System32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\System32\RpcRtRemote.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\System32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\System32\credssp.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\System32\GPAPI.dll - Microsoft Corporation
             audiosrv.dll - c:\windows\system32\audiosrv.dll - Microsoft Corporation
             POWRPROF.dll - c:\windows\system32\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             MMDevAPI.DLL - c:\windows\system32\MMDevAPI.DLL - Microsoft Corporation
             PROPSYS.dll - c:\windows\system32\PROPSYS.dll - Microsoft Corporation
             AVRT.dll - c:\windows\system32\AVRT.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             lmhsvc.dll - c:\windows\system32\lmhsvc.dll - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             nrpsrv.DLL - c:\windows\system32\nrpsrv.DLL - Microsoft Corporation
             WINSTA.dll - C:\Windows\System32\WINSTA.dll - Microsoft Corporation
             dhcpcore.dll - c:\windows\system32\dhcpcore.dll - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             firewallapi.dll - C:\Windows\System32\firewallapi.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\System32\VERSION.dll - Microsoft Corporation
             dhcpcore6.dll - C:\Windows\System32\dhcpcore6.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             audioses.dll - C:\Windows\System32\audioses.dll - Microsoft Corporation
             wscsvc.dll - c:\windows\system32\wscsvc.dll - Microsoft Corporation
             dbghelp.dll - c:\windows\system32\dbghelp.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\system32\wbem\wbemprox.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\system32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\system32\wbem\fastprox.dll - Microsoft Corporation
             NTDSAPI.dll - C:\Windows\system32\NTDSAPI.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             WINTRUST.DLL - C:\Windows\system32\WINTRUST.DLL - Microsoft Corporation
             imagehlp.dll - C:\Windows\system32\imagehlp.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\system32\bcryptprimitives.dll - Microsoft Corporation
             wuapi.dll - C:\Windows\system32\wuapi.dll - Microsoft Corporation
             Cabinet.dll - C:\Windows\system32\Cabinet.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\System32\USERENV.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\System32\wkscli.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             ssdpsrv.dll - c:\windows\system32\ssdpsrv.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             fntcache.dll - c:\windows\system32\fntcache.dll - Microsoft Corporation
             ktmw32.dll - c:\windows\system32\ktmw32.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PCHunter64.exe]Modules
             PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - ????(??)????????
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             MSIMG32.dll - C:\Windows\system32\MSIMG32.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\system32\COMDLG32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\COMCTL32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\system32\WINSPOOL.DRV - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             oledlg.dll - C:\Windows\system32\oledlg.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\system32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\system32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\Windows\system32\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\system32\Normaliz.dll - Microsoft Corporation
             gdiplus.dll - C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\gdiplus.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             OLEACC.dll - C:\Windows\system32\OLEACC.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\system32\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             RICHED32.DLL - C:\Windows\system32\RICHED32.DLL - Microsoft Corporation
             RICHED20.dll - C:\Windows\system32\RICHED20.dll - Microsoft Corporation
             Psapi.dll - C:\Windows\system32\Psapi.dll - Microsoft Corporation
             comctl32.DLL - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.DLL - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\system32\WindowsCodecs.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             EhStorShell.dll - C:\Windows\system32\EhStorShell.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             PROPSYS.dll - C:\Windows\system32\PROPSYS.dll - Microsoft Corporation
             cscui.dll - C:\Windows\System32\cscui.dll - Microsoft Corporation
             CSCDLL.dll - C:\Windows\System32\CSCDLL.dll - Microsoft Corporation
             CSCAPI.dll - C:\Windows\system32\CSCAPI.dll - Microsoft Corporation
             ntshrui.dll - C:\Windows\system32\ntshrui.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\system32\srvcli.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             Secur32.dll - C:\Windows\system32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             dnsapi.DLL - C:\Windows\system32\dnsapi.DLL - Microsoft Corporation
             RASAPI32.dll - C:\Windows\system32\RASAPI32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\system32\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\system32\rtutils.dll - Microsoft Corporation
             sensapi.dll - C:\Windows\system32\sensapi.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\system32\rasadhlp.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\System32\fwpuclnt.dll - Microsoft Corporation
             peerdist.dll - C:\Windows\system32\peerdist.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             AUTHZ.dll - C:\Windows\system32\AUTHZ.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Modules
             csrss.exe - C:\Windows\system32\csrss.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             basesrv.DLL - C:\Windows\system32\basesrv.DLL - Microsoft Corporation
             winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\SYSTEM32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sxssrv.DLL - C:\Windows\system32\sxssrv.DLL - Microsoft Corporation
             sxs.dll - C:\Windows\system32\sxs.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[smss.exe]Modules
             smss.exe - C:\Windows\System32\smss.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[winlogon.exe]Modules
             winlogon.exe - C:\Windows\system32\winlogon.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             UXINIT.dll - C:\Windows\system32\UXINIT.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\system32\WindowsCodecs.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\system32\wkscli.dll - Microsoft Corporation
             netjoin.dll - C:\Windows\system32\netjoin.dll - Microsoft Corporation
             netutils.dll - C:\Windows\system32\netutils.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             MPR.dll - C:\Windows\system32\MPR.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvSCPAPISvr.exe]Modules
             nvSCPAPISvr.exe - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - NVIDIA Corporation
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\syswow64\WINSPOOL.DRV - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             DEVRTL.dll - C:\Windows\syswow64\DEVRTL.dll - Microsoft Corporation
             SPINF.dll - C:\Windows\syswow64\SPINF.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             sfc.dll - C:\Windows\system32\sfc.dll - Microsoft Corporation
             sfc_os.DLL - C:\Windows\system32\sfc_os.DLL - Microsoft Corporation
             MpClient.dll - c:\program files\windows defender\MpClient.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\System32\GPAPI.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\System32\CRYPTBASE.dll - Microsoft Corporation
             imagehlp.dll - C:\Windows\system32\imagehlp.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\System32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\system32\bcryptprimitives.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\System32\ncrypt.dll - Microsoft Corporation
             mprtp.dll - c:\program files\windows defender\mprtp.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\system32\PSAPI.DLL - Microsoft Corporation
             tdh.dll - C:\Windows\System32\tdh.dll - Microsoft Corporation
             mpengine.dll - C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3B6BD43F-B87E-4648-853F-96B69869F957}\mpengine.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\System32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\System32\credssp.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\System32\RpcRtRemote.dll - Microsoft Corporation
             wscapi.dll - C:\Windows\System32\wscapi.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\system32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\system32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\Windows\system32\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\system32\Normaliz.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[explorer.exe]Modules
             Explorer.EXE - C:\Windows\Explorer.EXE - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             EXPLORERFRAME.dll - C:\Windows\system32\EXPLORERFRAME.dll - Microsoft Corporation
             DUser.dll - C:\Windows\system32\DUser.dll - Microsoft Corporation
             DUI70.dll - C:\Windows\system32\DUI70.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             POWRPROF.dll - C:\Windows\system32\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             gdiplus.dll - C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\gdiplus.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\system32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             PROPSYS.dll - C:\Windows\system32\PROPSYS.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\system32\WindowsCodecs.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             EhStorShell.dll - C:\Windows\system32\EhStorShell.dll - Microsoft Corporation
             cscui.dll - C:\Windows\System32\cscui.dll - Microsoft Corporation
             CSCDLL.dll - C:\Windows\System32\CSCDLL.dll - Microsoft Corporation
             CSCAPI.dll - C:\Windows\system32\CSCAPI.dll - Microsoft Corporation
             ntshrui.dll - C:\Windows\system32\ntshrui.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\system32\srvcli.dll - Microsoft Corporation
             IconCodecService.dll - C:\Windows\system32\IconCodecService.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             SndVolSSO.DLL - C:\Windows\system32\SndVolSSO.DLL - Microsoft Corporation
             HID.DLL - C:\Windows\system32\HID.DLL - Microsoft Corporation
             MMDevApi.dll - C:\Windows\System32\MMDevApi.dll - Microsoft Corporation
             timedate.cpl - C:\Windows\system32\timedate.cpl - Microsoft Corporation
             ATL.DLL - C:\Windows\system32\ATL.DLL - Microsoft Corporation
             actxprxy.dll - C:\Windows\system32\actxprxy.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             shdocvw.dll - C:\Windows\System32\shdocvw.dll - Microsoft Corporation
             LINKINFO.dll - C:\Windows\system32\LINKINFO.dll - Microsoft Corporation
             msutb.dll - C:\Windows\system32\msutb.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             shacct.dll - C:\Windows\System32\shacct.dll - Microsoft Corporation
             SAMLIB.dll - C:\Windows\system32\SAMLIB.dll - Microsoft Corporation
             samcli.dll - C:\Windows\system32\samcli.dll - Microsoft Corporation
             netutils.dll - C:\Windows\system32\netutils.dll - Microsoft Corporation
             xmllite.dll - C:\Windows\system32\xmllite.dll - Microsoft Corporation
             gameux.dll - C:\Windows\System32\gameux.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             wer.dll - C:\Windows\System32\wer.dll - Microsoft Corporation
             msls31.dll - C:\Windows\system32\msls31.dll - Microsoft Corporation
             tiptsf.dll - C:\Program Files\Common Files\microsoft shared\ink\tiptsf.dll - Microsoft Corporation
             authui.dll - C:\Windows\system32\authui.dll - Microsoft Corporation
             CRYPTUI.dll - C:\Windows\system32\CRYPTUI.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\system32\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\system32\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\Windows\system32\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\system32\Normaliz.dll - Microsoft Corporation
             ieframe.dll - C:\Windows\System32\ieframe.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\system32\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\System32\OLEACC.dll - Microsoft Corporation
             netshell.dll - C:\Windows\System32\netshell.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\Windows\System32\WINNSI.DLL - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             msiltcfg.dll - C:\Windows\system32\msiltcfg.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             msi.dll - C:\Windows\system32\msi.dll - Microsoft Corporation
             NetworkExplorer.dll - C:\Windows\system32\NetworkExplorer.dll - Microsoft Corporation
             stobject.dll - C:\Windows\system32\stobject.dll - Microsoft Corporation
             BatMeter.dll - C:\Windows\system32\BatMeter.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             wdmaud.drv - C:\Windows\system32\wdmaud.drv - Microsoft Corporation
             ksuser.dll - C:\Windows\system32\ksuser.dll - Microsoft Corporation
             AVRT.dll - C:\Windows\system32\AVRT.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             AUDIOSES.DLL - C:\Windows\system32\AUDIOSES.DLL - Microsoft Corporation
             msacm32.drv - C:\Windows\system32\msacm32.drv - Microsoft Corporation
             MSACM32.dll - C:\Windows\system32\MSACM32.dll - Microsoft Corporation
             midimap.dll - C:\Windows\system32\midimap.dll - Microsoft Corporation
             MsftEdit.dll - C:\Windows\system32\MsftEdit.dll - Microsoft Corporation
             es.dll - C:\Windows\system32\es.dll - Microsoft Corporation
             prnfldr.dll - C:\Windows\system32\prnfldr.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\system32\WINSPOOL.DRV - Microsoft Corporation
             MLANG.dll - C:\Windows\system32\MLANG.dll - Microsoft Corporation
             dxp.dll - C:\Windows\system32\dxp.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             Syncreg.dll - C:\Windows\system32\Syncreg.dll - Microsoft Corporation
             ehSSO.dll - C:\Windows\ehome\ehSSO.dll - Microsoft Corporation
             AltTab.dll - C:\Windows\System32\AltTab.dll - Microsoft Corporation
             wpdshserviceobj.dll - C:\Windows\system32\wpdshserviceobj.dll - Microsoft Corporation
             PortableDeviceTypes.dll - C:\Windows\system32\PortableDeviceTypes.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\Windows\system32\PortableDeviceApi.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\system32\taskschd.dll - Microsoft Corporation
             pnidui.dll - C:\Windows\System32\pnidui.dll - Microsoft Corporation
             QUtil.dll - C:\Windows\System32\QUtil.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\System32\wevtapi.dll - Microsoft Corporation
             cscobj.dll - C:\Windows\System32\cscobj.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             srchadmin.dll - C:\Windows\System32\srchadmin.dll - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\system32\mssprxy.dll - Microsoft Corporation
             Actioncenter.dll - C:\Windows\System32\Actioncenter.dll - Microsoft Corporation
             Wlanapi.dll - C:\Windows\system32\Wlanapi.dll - Microsoft Corporation
             wlanutil.dll - C:\Windows\system32\wlanutil.dll - Microsoft Corporation
             wwanapi.dll - C:\Windows\system32\wwanapi.dll - Microsoft Corporation
             wwapi.dll - C:\Windows\system32\wwapi.dll - Microsoft Corporation
             QAgent.dll - C:\Windows\System32\QAgent.dll - Microsoft Corporation
             bthprops.cpl - C:\Windows\System32\bthprops.cpl - Microsoft Corporation
             fxsst.dll - C:\Windows\system32\fxsst.dll - Microsoft Corporation
             FXSAPI.dll - C:\Windows\system32\FXSAPI.dll - Microsoft Corporation
             FXSRESM.DLL - C:\Windows\system32\FXSRESM.DLL - Microsoft Corporation
             SyncCenter.dll - C:\Windows\System32\SyncCenter.dll - Microsoft Corporation
             imapi2.dll - C:\Windows\system32\imapi2.dll - Microsoft Corporation
             hgcpl.dll - C:\Windows\System32\hgcpl.dll - Microsoft Corporation
             provsvc.dll - C:\Windows\System32\provsvc.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\system32\wkscli.dll - Microsoft Corporation
             SXS.DLL - C:\Windows\system32\SXS.DLL - Microsoft Corporation
             UIAnimation.dll - C:\Windows\System32\UIAnimation.dll - Microsoft Corporation
             DEVRTL.dll - C:\Windows\system32\DEVRTL.dll - Microsoft Corporation
             MPR.dll - C:\Windows\system32\MPR.dll - Microsoft Corporation
             wscinterop.dll - C:\Windows\System32\wscinterop.dll - Microsoft Corporation
             WSCAPI.dll - C:\Windows\System32\WSCAPI.dll - Microsoft Corporation
             wscui.cpl - C:\Windows\System32\wscui.cpl - Microsoft Corporation
             werconcpl.dll - C:\Windows\System32\werconcpl.dll - Microsoft Corporation
             framedynos.dll - C:\Windows\System32\framedynos.dll - Microsoft Corporation
             wercplsupport.dll - C:\Windows\System32\wercplsupport.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             hcproviders.dll - C:\Windows\System32\hcproviders.dll - Microsoft Corporation
             ieproxy.dll - C:\Program Files\Internet Explorer\ieproxy.dll - Microsoft Corporation
             thumbcache.dll - C:\Windows\system32\thumbcache.dll - Microsoft Corporation
             StructuredQuery.dll - C:\Windows\System32\StructuredQuery.dll - Microsoft Corporation
             drprov.dll - C:\Windows\System32\drprov.dll - Microsoft Corporation
             ntlanman.dll - C:\Windows\System32\ntlanman.dll - Microsoft Corporation
             davclnt.dll - C:\Windows\System32\davclnt.dll - Microsoft Corporation
             DAVHLPR.dll - C:\Windows\System32\DAVHLPR.dll - Microsoft Corporation
             wpdshext.dll - C:\Windows\system32\wpdshext.dll - Microsoft Corporation
             EhStorAPI.dll - C:\Windows\system32\EhStorAPI.dll - Microsoft Corporation
             zipfldr.dll - C:\Windows\system32\zipfldr.dll - Microsoft Corporation
             prremote.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\prremote.dll - Kaspersky Lab ZAO
             MSVCP100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\MSVCR100.dll - Microsoft Corporation
             prloader.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\prloader.dll - Kaspersky Lab ZAO

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Modules
             csrss.exe - C:\Windows\system32\csrss.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             basesrv.DLL - C:\Windows\system32\basesrv.DLL - Microsoft Corporation
             winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\SYSTEM32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sxssrv.DLL - C:\Windows\system32\sxssrv.DLL - Microsoft Corporation
             sxs.dll - C:\Windows\system32\sxs.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[wininit.exe]Modules
             wininit.exe - C:\Windows\system32\wininit.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             es.dll - c:\windows\system32\es.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             nsisvc.dll - c:\windows\system32\nsisvc.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             SXS.DLL - C:\Windows\system32\SXS.DLL - Microsoft Corporation
             netprofm.dll - c:\windows\system32\netprofm.dll - Microsoft Corporation
             nlaapi.dll - c:\windows\system32\nlaapi.dll - Microsoft Corporation
             wdi.dll - c:\windows\system32\wdi.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             perftrack.dll - C:\Windows\system32\perftrack.dll - Microsoft Corporation
             wer.dll - C:\Windows\system32\wer.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\system32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             AEPIC.dll - C:\Windows\system32\AEPIC.dll - Microsoft Corporation
             sfc.dll - C:\Windows\system32\sfc.dll - Microsoft Corporation
             sfc_os.DLL - C:\Windows\system32\sfc_os.DLL - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation
             winhttp.dll - C:\Windows\system32\winhttp.dll - Microsoft Corporation
             webio.dll - C:\Windows\system32\webio.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\system32\DNSAPI.dll - Microsoft Corporation
             napinsp.dll - C:\Windows\system32\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\system32\pnrpnsp.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\System32\mswsock.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\System32\winrnr.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\system32\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\System32\fwpuclnt.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[avp.exe]Modules
             avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             ushata.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ushata.dll - Kaspersky Lab ZAO
             avpinit.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpinit.dll - Kaspersky Lab ZAO
             fltLib.dll - C:\Windows\syswow64\fltLib.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             user32.dll - C:\Windows\syswow64\user32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             avpmain.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpmain.dll - Kaspersky Lab ZAO
             POWRPROF.dll - C:\Windows\syswow64\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             MSVCP100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             fssync.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fssync.DLL - Kaspersky Lab ZAO
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\syswow64\WINSTA.dll - Microsoft Corporation
             service.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\service.dll - Kaspersky Lab ZAO
             prremote.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.DLL - Kaspersky Lab ZAO
             prloader.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prloader.dll - Kaspersky Lab ZAO
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             userenv.dll - C:\Windows\syswow64\userenv.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             nfio.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\nfio.ppl - Kaspersky Lab ZAO
             MPR.dll - C:\Windows\syswow64\MPR.dll - Microsoft Corporation
             fsdrvplg.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fsdrvplg.ppl - Kaspersky Lab ZAO
             winreg.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\winreg.ppl - Kaspersky Lab ZAO
             pxstub.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\pxstub.ppl - Kaspersky Lab ZAO
             params.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\params.ppl - Kaspersky Lab ZAO
             app_core_legacy.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\app_core_legacy.dll - Kaspersky Lab ZAO
             key_value_storage.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\key_value_storage.DLL - Kaspersky Lab ZAO
             eka_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\eka_meta.dll - Kaspersky Lab ZAO
             updater_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\updater_meta.dll - Kaspersky Lab ZAO
             content_filtering_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\content_filtering_meta.dll - Kaspersky Lab ZAO
             am_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\am_meta.dll - Kaspersky Lab ZAO
             ac_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ac_meta.dll - Kaspersky Lab ZAO
             app_core_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\app_core_meta.dll - Kaspersky Lab ZAO
             product_metainfo.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\product_metainfo.dll - Kaspersky Lab ZAO
             plugins_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\plugins_meta.dll - Kaspersky Lab ZAO
             ksn_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksn_meta.dll - Kaspersky Lab ZAO
             ucp_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ucp_meta.dll - Kaspersky Lab ZAO
             klifpp_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klifpp_meta.dll - Kaspersky Lab ZAO
             instrumental_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\instrumental_meta.dll - Kaspersky Lab ZAO
             storage.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\storage.dll - Kaspersky Lab ZAO
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             avpservice.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpservice.dll - Kaspersky Lab ZAO
             avpgui.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpgui.ppl - Kaspersky Lab ZAO
             QtCore4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtCore4.dll - Digia Plc
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             QtDeclarative4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtDeclarative4.dll - Digia Plc
             QtScript4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtScript4.dll - Digia Plc
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             QtSql4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtSql4.dll - Digia Plc
             QtGui4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtGui4.dll - Digia Plc
             COMDLG32.dll - C:\Windows\syswow64\COMDLG32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\syswow64\WINSPOOL.DRV - Microsoft Corporation
             QtNetwork4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\QtNetwork4.dll - Digia Plc
             RASAPI32.dll - C:\Windows\syswow64\RASAPI32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\syswow64\rasman.dll - Microsoft Corporation
             WININET.dll - C:\Windows\syswow64\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\syswow64\urlmon.dll - Microsoft Corporation
             dblite.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll - 
             icuuc40.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icuuc40.dll - IBM Corporation and others
             icudt40.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icudt40.dll - IBM Corporation and others
             WINHTTP.dll - C:\Windows\syswow64\WINHTTP.dll - Microsoft Corporation
             webio.dll - C:\Windows\syswow64\webio.dll - Microsoft Corporation
             basegui.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\basegui.ppl - Kaspersky Lab ZAO
             NETAPI32.dll - C:\Windows\syswow64\NETAPI32.dll - Microsoft Corporation
             netutils.dll - C:\Windows\syswow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\syswow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\syswow64\wkscli.dll - Microsoft Corporation
             SAMCLI.DLL - C:\Windows\syswow64\SAMCLI.DLL - Microsoft Corporation
             MSIMG32.dll - C:\Windows\syswow64\MSIMG32.dll - Microsoft Corporation
             thpimpl.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\thpimpl.ppl - Kaspersky Lab ZAO
             memmon.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\memmon.dll - Kaspersky Lab ZAO
             localization_manager.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\localization_manager.dll - Kaspersky Lab ZAO
             CLBCatQ.DLL - C:\Windows\syswow64\CLBCatQ.DLL - Microsoft Corporation
             explorerframe.dll - C:\Windows\syswow64\explorerframe.dll - Microsoft Corporation
             DUser.dll - C:\Windows\syswow64\DUser.dll - Microsoft Corporation
             DUI70.dll - C:\Windows\syswow64\DUI70.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\syswow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\syswow64\rsaenh.dll - Microsoft Corporation
             parental_control_gui.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\parental_control_gui.dll - Kaspersky Lab ZAO
             hashmd5.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\hashmd5.ppl - Kaspersky Lab ZAO
             RICHED20.DLL - C:\Windows\syswow64\RICHED20.DLL - Microsoft Corporation
             propmap.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\propmap.ppl - Kaspersky Lab ZAO
             qgif4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imageformats\qgif4.dll - Digia Plc
             qico4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imageformats\qico4.dll - Digia Plc
             qjpeg4.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imageformats\qjpeg4.dll - Digia Plc
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             DNSAPI.dll - c:\windows\system32\DNSAPI.dll - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             Fwpuclnt.dll - C:\Windows\system32\Fwpuclnt.dll - Microsoft Corporation
             dnsext.dll - C:\Windows\System32\dnsext.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             iphlpapi.dll - C:\Windows\system32\iphlpapi.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wkssvc.dll - c:\windows\system32\wkssvc.dll - Microsoft Corporation
             netutils.dll - c:\windows\system32\netutils.dll - Microsoft Corporation
             netjoin.dll - c:\windows\system32\netjoin.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             cryptsvc.dll - c:\windows\system32\cryptsvc.dll - Microsoft Corporation
             CRYPTNET.dll - c:\windows\system32\CRYPTNET.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             VSSAPI.DLL - C:\Windows\system32\VSSAPI.DLL - Microsoft Corporation
             ATL.DLL - C:\Windows\system32\ATL.DLL - Microsoft Corporation
             VssTrace.DLL - C:\Windows\system32\VssTrace.DLL - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             samcli.dll - C:\Windows\system32\samcli.dll - Microsoft Corporation
             SAMLIB.dll - C:\Windows\system32\SAMLIB.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             es.dll - C:\Windows\system32\es.dll - Microsoft Corporation
             PROPSYS.dll - C:\Windows\system32\PROPSYS.dll - Microsoft Corporation
             nlasvc.dll - c:\windows\system32\nlasvc.dll - Microsoft Corporation
             wevtapi.dll - c:\windows\system32\wevtapi.dll - Microsoft Corporation
             ncsi.dll - c:\windows\system32\ncsi.dll - Microsoft Corporation
             WINHTTP.dll - c:\windows\system32\WINHTTP.dll - Microsoft Corporation
             webio.dll - c:\windows\system32\webio.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             ssdpapi.dll - C:\Windows\system32\ssdpapi.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\system32\wkscli.dll - Microsoft Corporation
             logoncli.dll - C:\Windows\system32\logoncli.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\system32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\system32\bcryptprimitives.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\system32\rasadhlp.dll - Microsoft Corporation
             ESENT.dll - C:\Windows\system32\ESENT.dll - Microsoft Corporation
             psapi.dll - C:\Windows\system32\psapi.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[services.exe]Modules
             services.exe - C:\Windows\system32\services.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             scext.dll - C:\Windows\system32\scext.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\system32\Secur32.dll - Microsoft Corporation
             SCESRV.dll - C:\Windows\system32\SCESRV.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\system32\srvcli.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             AUTHZ.dll - C:\Windows\system32\AUTHZ.dll - Microsoft Corporation
             UBPM.dll - C:\Windows\system32\UBPM.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[lsass.exe]Modules
             lsass.exe - C:\Windows\system32\lsass.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             SspiSrv.dll - C:\Windows\system32\SspiSrv.dll - Microsoft Corporation
             lsasrv.dll - C:\Windows\system32\lsasrv.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             SAMSRV.dll - C:\Windows\system32\SAMSRV.dll - Microsoft Corporation
             cryptdll.dll - C:\Windows\system32\cryptdll.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\system32\wevtapi.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             cngaudit.dll - C:\Windows\system32\cngaudit.dll - Microsoft Corporation
             AUTHZ.dll - C:\Windows\system32\AUTHZ.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\system32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\system32\bcrypt.dll - Microsoft Corporation
             msprivs.DLL - C:\Windows\system32\msprivs.DLL - Microsoft Corporation
             netjoin.dll - C:\Windows\system32\netjoin.dll - Microsoft Corporation
             negoexts.DLL - C:\Windows\system32\negoexts.DLL - Microsoft Corporation
             Secur32.dll - C:\Windows\system32\Secur32.dll - Microsoft Corporation
             cryptbase.dll - C:\Windows\system32\cryptbase.dll - Microsoft Corporation
             kerberos.DLL - C:\Windows\system32\kerberos.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             msv1_0.DLL - C:\Windows\system32\msv1_0.DLL - Microsoft Corporation
             netlogon.DLL - C:\Windows\system32\netlogon.DLL - Microsoft Corporation
             DNSAPI.dll - C:\Windows\system32\DNSAPI.dll - Microsoft Corporation
             logoncli.dll - C:\Windows\system32\logoncli.dll - Microsoft Corporation
             schannel.DLL - C:\Windows\system32\schannel.DLL - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             wdigest.DLL - C:\Windows\system32\wdigest.DLL - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             tspkg.DLL - C:\Windows\system32\tspkg.DLL - Microsoft Corporation
             pku2u.DLL - C:\Windows\system32\pku2u.DLL - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\system32\bcryptprimitives.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             efslsaext.dll - C:\Windows\system32\efslsaext.dll - Microsoft Corporation
             scecli.DLL - C:\Windows\system32\scecli.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             keyiso.dll - C:\Windows\system32\keyiso.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             netutils.dll - C:\Windows\system32\netutils.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             MPR.dll - C:\Windows\system32\MPR.dll - Microsoft Corporation
             dssenh.dll - C:\Windows\system32\dssenh.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\System32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             audiosrv.dll - c:\windows\system32\audiosrv.dll - Microsoft Corporation
             POWRPROF.dll - c:\windows\system32\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             MMDevAPI.DLL - c:\windows\system32\MMDevAPI.DLL - Microsoft Corporation
             PROPSYS.dll - c:\windows\system32\PROPSYS.dll - Microsoft Corporation
             AVRT.dll - c:\windows\system32\AVRT.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             cscsvc.dll - c:\windows\system32\cscsvc.dll - Microsoft Corporation
             USERENV.dll - c:\windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\System32\pcwum.dll - Microsoft Corporation
             PeerDist.dll - C:\Windows\System32\PeerDist.dll - Microsoft Corporation
             AUTHZ.dll - C:\Windows\System32\AUTHZ.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\system32\taskschd.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\System32\SspiCli.dll - Microsoft Corporation
             mstask.dll - C:\Windows\System32\mstask.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\System32\RpcRtRemote.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\System32\WTSAPI32.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\System32\GPAPI.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\System32\WINSTA.dll - Microsoft Corporation
             uxsms.dll - c:\windows\system32\uxsms.dll - Microsoft Corporation
             wlansvc.dll - c:\windows\system32\wlansvc.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             bcrypt.dll - c:\windows\system32\bcrypt.dll - Microsoft Corporation
             dsrole.dll - c:\windows\system32\dsrole.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             WLANMSM.DLL - c:\windows\system32\WLANMSM.DLL - Microsoft Corporation
             WLANSEC.dll - c:\windows\system32\WLANSEC.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             OneX.DLL - c:\windows\system32\OneX.DLL - Microsoft Corporation
             eappprxy.dll - c:\windows\system32\eappprxy.dll - Microsoft Corporation
             dhcpcsvc.DLL - c:\windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             IPHLPAPI.DLL - c:\windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - c:\windows\system32\WINNSI.DLL - Microsoft Corporation
             eappcfg.dll - c:\windows\system32\eappcfg.dll - Microsoft Corporation
             wlgpclnt.dll - c:\windows\system32\wlgpclnt.dll - Microsoft Corporation
             l2gpstore.dll - c:\windows\system32\l2gpstore.dll - Microsoft Corporation
             wlanutil.dll - c:\windows\system32\wlanutil.dll - Microsoft Corporation
             SYSNTFY.dll - c:\windows\system32\SYSNTFY.dll - Microsoft Corporation
             WinSCard.dll - c:\windows\system32\WinSCard.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             credssp.dll - C:\Windows\System32\credssp.dll - Microsoft Corporation
             kerberos.DLL - C:\Windows\system32\kerberos.DLL - Microsoft Corporation
             cryptdll.dll - C:\Windows\System32\cryptdll.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             pcasvc.dll - c:\windows\system32\pcasvc.dll - Microsoft Corporation
             AEPIC.dll - c:\windows\system32\AEPIC.dll - Microsoft Corporation
             sfc.dll - c:\windows\system32\sfc.dll - Microsoft Corporation
             sfc_os.DLL - c:\windows\system32\sfc_os.DLL - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             wevtapi.dll - c:\windows\system32\wevtapi.dll - Microsoft Corporation
             sysmain.dll - c:\windows\system32\sysmain.dll - Microsoft Corporation
             trkwks.dll - c:\windows\system32\trkwks.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\System32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             HID.DLL - c:\windows\system32\HID.DLL - Microsoft Corporation
             wdi.dll - c:\windows\system32\wdi.dll - Microsoft Corporation
             PortableDeviceApi.dll - C:\Windows\system32\PortableDeviceApi.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             APPHLPDM.DLL - C:\Windows\SYSTEM32\APPHLPDM.DLL - Microsoft Corporation
             wer.dll - C:\Windows\System32\wer.dll - Microsoft Corporation
             portabledeviceconnectapi.dll - C:\Windows\System32\portabledeviceconnectapi.dll - Microsoft Corporation
             cscobj.dll - C:\Windows\system32\cscobj.dll - Microsoft Corporation
             netman.dll - c:\windows\system32\netman.dll - Microsoft Corporation
             netshell.dll - C:\Windows\System32\netshell.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             RASDLG.dll - C:\Windows\System32\RASDLG.dll - Microsoft Corporation
             MPRAPI.dll - C:\Windows\System32\MPRAPI.dll - Microsoft Corporation
             RASAPI32.dll - C:\Windows\System32\RASAPI32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\System32\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\System32\rtutils.dll - Microsoft Corporation
             netcfgx.dll - C:\Windows\system32\netcfgx.dll - Microsoft Corporation
             devrtl.DLL - C:\Windows\System32\devrtl.DLL - Microsoft Corporation
             hnetcfg.dll - C:\Windows\system32\hnetcfg.dll - Microsoft Corporation
             ATL.DLL - C:\Windows\system32\ATL.DLL - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\system32\wbem\wbemprox.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\system32\wbem\wbemsvc.dll - Microsoft Corporation
             fastprox.dll - C:\Windows\system32\wbem\fastprox.dll - Microsoft Corporation
             NTDSAPI.dll - C:\Windows\system32\NTDSAPI.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[sppsvc.exe]Modules
             sppsvc.exe - C:\Windows\system32\sppsvc.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             sppwinob.dll - C:\Windows\system32\sppwinob.dll - Microsoft Corporation
             sppobjs.dll - C:\Windows\system32\sppobjs.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\system32\DNSAPI.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchProtocolHost.exe]Modules
             SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             TQUERY.DLL - C:\Windows\system32\TQUERY.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             MSSHooks.dll - C:\Windows\system32\MSSHooks.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             Msidle.dll - C:\Windows\system32\Msidle.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\system32\mssprxy.dll - Microsoft Corporation
             mssph.dll - C:\Windows\system32\mssph.dll - Microsoft Corporation
             MAPI32.dll - C:\Windows\system32\MAPI32.dll - Microsoft Corporation
             AUTHZ.dll - C:\Windows\system32\AUTHZ.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - Microsoft Corporation
             propsys.dll - C:\Windows\system32\propsys.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             ntshrui.dll - C:\Windows\system32\ntshrui.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\system32\srvcli.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\system32\cscapi.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             umpnpmgr.dll - c:\windows\system32\umpnpmgr.dll - Microsoft Corporation
             SPINF.dll - c:\windows\system32\SPINF.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             DEVRTL.dll - c:\windows\system32\DEVRTL.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             umpo.dll - c:\windows\system32\umpo.dll - Microsoft Corporation
             WINSTA.dll - c:\windows\system32\WINSTA.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             pcwum.DLL - c:\windows\system32\pcwum.DLL - Microsoft Corporation
             rpcss.dll - c:\windows\system32\rpcss.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             wmidcprv.dll - C:\Windows\system32\wbem\wmidcprv.dll - Microsoft Corporation
             FastProx.dll - C:\Windows\system32\wbem\FastProx.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             NTDSAPI.dll - C:\Windows\system32\NTDSAPI.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\system32\wbem\wbemprox.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\system32\wbem\wmiutils.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[daemonu.exe]Modules
             daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             WINHTTP.dll - C:\Windows\syswow64\WINHTTP.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             webio.dll - C:\Windows\syswow64\webio.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\syswow64\apphelp.dll - Microsoft Corporation
             AcGenral.DLL - C:\Windows\AppPatch\AcGenral.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\syswow64\UxTheme.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             samcli.dll - C:\Windows\syswow64\samcli.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             MSACM32.dll - C:\Windows\syswow64\MSACM32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             sfc.dll - C:\Windows\syswow64\sfc.dll - Microsoft Corporation
             sfc_os.DLL - C:\Windows\syswow64\sfc_os.DLL - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\syswow64\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\Windows\syswow64\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             MPR.dll - C:\Windows\syswow64\MPR.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\Syswow64\wshtcpip.dll - Microsoft Corporation
             NLAapi.dll - C:\Windows\syswow64\NLAapi.dll - Microsoft Corporation
             napinsp.dll - C:\Windows\syswow64\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\syswow64\pnrpnsp.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\syswow64\DNSAPI.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\Syswow64\winrnr.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\syswow64\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\syswow64\WINNSI.DLL - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\Syswow64\fwpuclnt.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\syswow64\rasadhlp.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvvsvc.exe]Modules
             nvvsvc.exe - C:\Windows\system32\nvvsvc.exe - NVIDIA Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             nvxdbat.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll - NVIDIA Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             NLAapi.dll - C:\Windows\syswow64\NLAapi.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\syswow64\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\syswow64\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\syswow64\dhcpcsvc6.DLL - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\syswow64\CLBCatQ.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\syswow64\dhcpcsvc.DLL - Microsoft Corporation
             MMDevApi.dll - C:\Windows\Syswow64\MMDevApi.dll - Microsoft Corporation
             PROPSYS.dll - C:\Windows\Syswow64\PROPSYS.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\syswow64\GPAPI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             wship6.dll - C:\Windows\Syswow64\wship6.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\syswow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\syswow64\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\syswow64\mssprxy.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\Syswow64\wshtcpip.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\syswow64\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\syswow64\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\Syswow64\fwpuclnt.dll - Microsoft Corporation
             mscms.dll - C:\Windows\syswow64\mscms.dll - Microsoft Corporation
             Wpc.dll - C:\Windows\Syswow64\Wpc.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\Syswow64\wevtapi.dll - Microsoft Corporation
             samcli.dll - C:\Windows\syswow64\samcli.dll - Microsoft Corporation
             SAMLIB.dll - C:\Windows\syswow64\SAMLIB.dll - Microsoft Corporation
             netutils.dll - C:\Windows\syswow64\netutils.dll - Microsoft Corporation
             msftedit.dll - C:\Windows\syswow64\msftedit.dll - Microsoft Corporation
             WINHTTP.dll - C:\Windows\syswow64\WINHTTP.dll - Microsoft Corporation
             webio.dll - C:\Windows\syswow64\webio.dll - Microsoft Corporation
             credssp.dll - C:\Windows\syswow64\credssp.dll - Microsoft Corporation
             explorerframe.dll - C:\Windows\syswow64\explorerframe.dll - Microsoft Corporation
             DUser.dll - C:\Windows\syswow64\DUser.dll - Microsoft Corporation
             DUI70.dll - C:\Windows\syswow64\DUI70.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\syswow64\apphelp.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\syswow64\WINSTA.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\syswow64\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\syswow64\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\SysWOW64\bcryptprimitives.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\syswow64\cryptnet.dll - Microsoft Corporation
             LINKINFO.dll - C:\Windows\syswow64\LINKINFO.dll - Microsoft Corporation
             netshell.dll - C:\Windows\Syswow64\netshell.dll - Microsoft Corporation
             ntshrui.dll - C:\Windows\syswow64\ntshrui.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\syswow64\srvcli.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\syswow64\cscapi.dll - Microsoft Corporation
             slc.dll - C:\Windows\syswow64\slc.dll - Microsoft Corporation
             d3d9.dll - C:\Windows\syswow64\d3d9.dll - Microsoft Corporation
             d3d8thk.dll - C:\Windows\syswow64\d3d8thk.dll - Microsoft Corporation
             nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             powrprof.dll - C:\Windows\syswow64\powrprof.dll - Microsoft Corporation
             nvSCPAPI.dll - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll - NVIDIA Corporation
             actxprxy.dll - C:\Windows\SysWOW64\actxprxy.dll - Microsoft Corporation
             nvapi.dll - C:\Windows\syswow64\nvapi.dll - NVIDIA Corporation
             devenum.dll - C:\Windows\SysWOW64\devenum.dll - Microsoft Corporation
             msdmo.dll - C:\Windows\syswow64\msdmo.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\syswow64\WindowsCodecs.dll - Microsoft Corporation
             EhStorShell.dll - C:\Windows\syswow64\EhStorShell.dll - Microsoft Corporation
             shdocvw.dll - C:\Windows\syswow64\shdocvw.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\SysWOW64\urlmon.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             WININET.dll - C:\Windows\syswow64\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             RASAPI32.dll - C:\Windows\syswow64\RASAPI32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\syswow64\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\syswow64\rtutils.dll - Microsoft Corporation
             sensapi.dll - C:\Windows\syswow64\sensapi.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\Syswow64\netprofm.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\Syswow64\npmproxy.dll - Microsoft Corporation
             MpOav.dll - C:\Program Files (x86)\Windows Defender\MpOav.dll - Microsoft Corporation
             office_antivirus.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\office_antivirus.dll - Kaspersky Lab ZAO
             prremote.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.dll - Kaspersky Lab ZAO
             MSVCP100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             prloader.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prloader.dll - Kaspersky Lab ZAO
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             mmcss.dll - c:\windows\system32\mmcss.dll - Microsoft Corporation
             AVRT.dll - c:\windows\system32\AVRT.dll - Microsoft Corporation
             profsvc.dll - c:\windows\system32\profsvc.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             SYSNTFY.dll - c:\windows\system32\SYSNTFY.dll - Microsoft Corporation
             USERENV.dll - c:\windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - c:\windows\system32\profapi.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             ATL.DLL - c:\windows\system32\ATL.DLL - Microsoft Corporation
             themeservice.dll - c:\windows\system32\themeservice.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation
             sens.dll - c:\windows\system32\sens.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             eapsvc.dll - c:\windows\system32\eapsvc.dll - Microsoft Corporation
             eapphost.dll - C:\Windows\system32\eapphost.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             umb.dll - C:\Windows\system32\umb.dll - Microsoft Corporation
             shsvcs.dll - c:\windows\system32\shsvcs.dll - Microsoft Corporation
             slc.dll - c:\windows\system32\slc.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             schedsvc.dll - c:\windows\system32\schedsvc.dll - Microsoft Corporation
             pcwum.dll - c:\windows\system32\pcwum.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             NETAPI32.dll - c:\windows\system32\NETAPI32.dll - Microsoft Corporation
             netutils.dll - c:\windows\system32\netutils.dll - Microsoft Corporation
             srvcli.dll - c:\windows\system32\srvcli.dll - Microsoft Corporation
             wkscli.dll - c:\windows\system32\wkscli.dll - Microsoft Corporation
             SspiCli.dll - c:\windows\system32\SspiCli.dll - Microsoft Corporation
             wevtapi.dll - c:\windows\system32\wevtapi.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             UBPM.dll - c:\windows\system32\UBPM.dll - Microsoft Corporation
             ktmw32.dll - c:\windows\system32\ktmw32.dll - Microsoft Corporation
             XmlLite.dll - c:\windows\system32\XmlLite.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             FVEAPI.dll - C:\Windows\system32\FVEAPI.dll - Microsoft Corporation
             tbs.dll - C:\Windows\system32\tbs.dll - Microsoft Corporation
             FVECERTS.dll - C:\Windows\system32\FVECERTS.dll - Microsoft Corporation
             LOGONCLI.DLL - C:\Windows\system32\LOGONCLI.DLL - Microsoft Corporation
             wiarpc.dll - C:\Windows\system32\wiarpc.dll - Microsoft Corporation
             taskcomp.dll - C:\Windows\system32\taskcomp.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             netjoin.dll - C:\Windows\system32\netjoin.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - Microsoft Corporation
             PROPSYS.dll - C:\Windows\system32\PROPSYS.dll - Microsoft Corporation
             SXS.DLL - C:\Windows\system32\SXS.DLL - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             tschannel.dll - C:\Windows\system32\tschannel.dll - Microsoft Corporation
             ikeext.dll - c:\windows\system32\ikeext.dll - Microsoft Corporation
             fwpuclnt.dll - c:\windows\system32\fwpuclnt.dll - Microsoft Corporation
             ncrypt.dll - C:\Windows\system32\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\system32\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\system32\bcryptprimitives.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             wmisvc.dll - c:\windows\system32\wbem\wmisvc.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             srvsvc.dll - c:\windows\system32\srvsvc.dll - Microsoft Corporation
             dsrole.dll - c:\windows\system32\dsrole.dll - Microsoft Corporation
             browser.dll - c:\windows\system32\browser.dll - Microsoft Corporation
             iphlpsvc.dll - c:\windows\system32\iphlpsvc.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             rtutils.dll - c:\windows\system32\rtutils.dll - Microsoft Corporation
             sqmapi.dll - c:\windows\system32\sqmapi.dll - Microsoft Corporation
             WDSCORE.dll - c:\windows\system32\WDSCORE.dll - Microsoft Corporation
             SSCORE.DLL - C:\Windows\system32\SSCORE.DLL - Microsoft Corporation
             CLUSAPI.DLL - C:\Windows\system32\CLUSAPI.DLL - Microsoft Corporation
             cryptdll.dll - C:\Windows\system32\cryptdll.dll - Microsoft Corporation
             RESUTILS.DLL - C:\Windows\system32\RESUTILS.DLL - Microsoft Corporation
             VSSAPI.DLL - C:\Windows\system32\VSSAPI.DLL - Microsoft Corporation
             VssTrace.DLL - C:\Windows\system32\VssTrace.DLL - Microsoft Corporation
             devrtl.DLL - C:\Windows\system32\devrtl.DLL - Microsoft Corporation
             samcli.dll - C:\Windows\system32\samcli.dll - Microsoft Corporation
             SAMLIB.dll - C:\Windows\system32\SAMLIB.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             NCI.dll - C:\Windows\system32\NCI.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\system32\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\system32\rasadhlp.dll - Microsoft Corporation
             wbemcore.dll - C:\Windows\system32\wbem\wbemcore.dll - Microsoft Corporation
             esscli.dll - C:\Windows\system32\wbem\esscli.dll - Microsoft Corporation
             FastProx.dll - C:\Windows\system32\wbem\FastProx.dll - Microsoft Corporation
             NTDSAPI.dll - C:\Windows\system32\NTDSAPI.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\system32\wbem\wmiutils.dll - Microsoft Corporation
             repdrvfs.dll - C:\Windows\system32\wbem\repdrvfs.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             wmiprvsd.dll - C:\Windows\system32\wbem\wmiprvsd.dll - Microsoft Corporation
             NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             wbemess.dll - C:\Windows\system32\wbem\wbemess.dll - Microsoft Corporation
             aelupsvc.dll - c:\windows\system32\aelupsvc.dll - Microsoft Corporation
             ncprov.dll - C:\Windows\system32\wbem\ncprov.dll - Microsoft Corporation
             qmgr.dll - c:\windows\system32\qmgr.dll - Microsoft Corporation
             bitsperf.dll - c:\windows\system32\bitsperf.dll - Microsoft Corporation
             bitsigd.dll - C:\Windows\system32\bitsigd.dll - Microsoft Corporation
             upnp.dll - C:\Windows\system32\upnp.dll - Microsoft Corporation
             WINHTTP.dll - C:\Windows\system32\WINHTTP.dll - Microsoft Corporation
             webio.dll - C:\Windows\system32\webio.dll - Microsoft Corporation
             SSDPAPI.dll - C:\Windows\system32\SSDPAPI.dll - Microsoft Corporation
             msxml3.dll - C:\Windows\System32\msxml3.dll - Microsoft Corporation
             es.dll - C:\Windows\system32\es.dll - Microsoft Corporation
             wuaueng.dll - c:\windows\system32\wuaueng.dll - Microsoft Corporation
             ESENT.dll - c:\windows\system32\ESENT.dll - Microsoft Corporation
             WINSPOOL.DRV - c:\windows\system32\WINSPOOL.DRV - Microsoft Corporation
             Cabinet.dll - c:\windows\system32\Cabinet.dll - Microsoft Corporation
             mspatcha.dll - c:\windows\system32\mspatcha.dll - Microsoft Corporation
             psapi.dll - C:\Windows\system32\psapi.dll - Microsoft Corporation
             WMsgAPI.dll - C:\Windows\system32\WMsgAPI.dll - Microsoft Corporation
             RasApi32.dll - C:\Windows\system32\RasApi32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\system32\rasman.dll - Microsoft Corporation
             wer.dll - C:\Windows\system32\wer.dll - Microsoft Corporation
             wbemprox.dll - C:\Windows\system32\wbem\wbemprox.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskhost.exe]Modules
             taskhost.exe - C:\Windows\system32\taskhost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\system32\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             MsCtfMonitor.dll - C:\Windows\system32\MsCtfMonitor.dll - Microsoft Corporation
             MSUTB.dll - C:\Windows\system32\MSUTB.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             HotStartUserAgent.dll - C:\Windows\System32\HotStartUserAgent.dll - Microsoft Corporation
             PlaySndSrv.dll - C:\Windows\System32\PlaySndSrv.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             dimsjob.dll - C:\Windows\system32\dimsjob.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             taskschd.dll - C:\Windows\system32\taskschd.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             MMDevAPI.DLL - C:\Windows\system32\MMDevAPI.DLL - Microsoft Corporation
             PROPSYS.dll - C:\Windows\system32\PROPSYS.dll - Microsoft Corporation
             wdmaud.drv - C:\Windows\system32\wdmaud.drv - Microsoft Corporation
             ksuser.dll - C:\Windows\system32\ksuser.dll - Microsoft Corporation
             AVRT.dll - C:\Windows\system32\AVRT.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             AUDIOSES.DLL - C:\Windows\system32\AUDIOSES.DLL - Microsoft Corporation
             msacm32.drv - C:\Windows\system32\msacm32.drv - Microsoft Corporation
             MSACM32.dll - C:\Windows\system32\MSACM32.dll - Microsoft Corporation
             midimap.dll - C:\Windows\system32\midimap.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll - 
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll - 
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             gdiplus.dll - C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[audiodg.exe]Modules
             AUDIODG.EXE - C:\Windows\system32\AUDIODG.EXE - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\System32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\System32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\System32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\System32\RPCRT4.dll - Microsoft Corporation
             MMDevAPI.DLL - C:\Windows\System32\MMDevAPI.DLL - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             USER32.dll - C:\Windows\System32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\System32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\System32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\System32\USP10.dll - Microsoft Corporation
             PROPSYS.dll - C:\Windows\System32\PROPSYS.dll - Microsoft Corporation
             ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\System32\OLEAUT32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             audioses.dll - C:\Windows\System32\audioses.dll - Microsoft Corporation
             audioeng.dll - C:\Windows\System32\audioeng.dll - Microsoft Corporation
             AVRT.dll - C:\Windows\System32\AVRT.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             audiokse.dll - C:\Windows\System32\audiokse.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\System32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\System32\MSASN1.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\System32\WINTRUST.dll - Microsoft Corporation
             ksuser.dll - C:\Windows\System32\ksuser.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             RtkAPO64.dll - C:\Windows\system32\RtkAPO64.dll - Realtek Semiconductor Corp.
             WMALFXGFXDSP.dll - C:\Windows\system32\WMALFXGFXDSP.dll - Microsoft Corporation
             mfplat.DLL - C:\Windows\system32\mfplat.DLL - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             GPAPI.dll - c:\windows\system32\GPAPI.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             Secur32.dll - c:\windows\system32\Secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             SYSNTFY.dll - c:\windows\system32\SYSNTFY.dll - Microsoft Corporation
             nlaapi.dll - c:\windows\system32\nlaapi.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             dsrole.dll - C:\Windows\system32\dsrole.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation
             SAMLIB.dll - C:\Windows\system32\SAMLIB.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[postak.exe]Modules
             postak.exe - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\postak.exe - 
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             core.4.dll - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\core.4.dll - 
             WINHTTP.dll - C:\Windows\syswow64\WINHTTP.dll - Microsoft Corporation
             webio.dll - C:\Windows\syswow64\webio.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\syswow64\UxTheme.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             WININET.dll - C:\Windows\syswow64\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\syswow64\urlmon.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             MSVCP100.dll - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\MSVCR100.dll - Microsoft Corporation
             email.4.dll - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\email.4.dll - 
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\syswow64\DNSAPI.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\syswow64\COMDLG32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             Wtsapi32.dll - C:\Windows\syswow64\Wtsapi32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\syswow64\WINSTA.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             iphlpapi.DLL - C:\Windows\syswow64\iphlpapi.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\syswow64\WINNSI.DLL - Microsoft Corporation
             RASAPI32.dll - C:\Windows\syswow64\RASAPI32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\syswow64\rasman.dll - Microsoft Corporation
             rtutils.dll - C:\Windows\syswow64\rtutils.dll - Microsoft Corporation
             sensapi.dll - C:\Windows\syswow64\sensapi.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             wship6.dll - C:\Windows\Syswow64\wship6.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\syswow64\CLBCatQ.DLL - Microsoft Corporation
             nlaapi.dll - C:\Windows\Syswow64\nlaapi.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\syswow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\syswow64\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\syswow64\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\syswow64\dhcpcsvc.DLL - Microsoft Corporation
             wshtcpip.dll - C:\Windows\Syswow64\wshtcpip.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\syswow64\rasadhlp.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\Syswow64\fwpuclnt.dll - Microsoft Corporation
             credssp.dll - C:\Windows\syswow64\credssp.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             napinsp.dll - C:\Windows\syswow64\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\syswow64\pnrpnsp.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\Syswow64\winrnr.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\Syswow64\netprofm.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\Syswow64\npmproxy.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dwm.exe]Modules
             Dwm.exe - C:\Windows\system32\Dwm.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             dwmredir.dll - C:\Windows\system32\dwmredir.dll - Microsoft Corporation
             dwmcore.dll - C:\Windows\system32\dwmcore.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\system32\WindowsCodecs.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             d3d10_1.dll - C:\Windows\system32\d3d10_1.dll - Microsoft Corporation
             d3d10_1core.dll - C:\Windows\system32\d3d10_1core.dll - Microsoft Corporation
             dxgi.dll - C:\Windows\system32\dxgi.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\system32\PSAPI.DLL - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             nvwgf2umx.dll - C:\Windows\system32\nvwgf2umx.dll - NVIDIA Corporation
             uDWM.dll - C:\Windows\system32\uDWM.dll - Microsoft Corporation
             slc.dll - C:\Windows\system32\slc.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             d3dcompiler_43.dll - C:\Windows\syswow64\d3dcompiler_43.dll - Microsoft Corporation
             d3dx9_43.dll - C:\Windows\syswow64\d3dx9_43.dll - Microsoft Corporation
             libglesv2.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libglesv2.dll - 
             d3d9.dll - C:\Windows\syswow64\d3d9.dll - Microsoft Corporation
             d3d8thk.dll - C:\Windows\syswow64\d3d8thk.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             libegl.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libegl.dll - 
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             powrprof.dll - C:\Windows\syswow64\powrprof.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             nvSCPAPI.dll - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll - NVIDIA Corporation
             dxva2.dll - C:\Windows\syswow64\dxva2.dll - Microsoft Corporation
             mf.dll - C:\Windows\syswow64\mf.dll - Microsoft Corporation
             ATL.DLL - C:\Windows\syswow64\ATL.DLL - Microsoft Corporation
             MFPlat.DLL - C:\Windows\syswow64\MFPlat.DLL - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             AVRT.dll - C:\Windows\syswow64\AVRT.dll - Microsoft Corporation
             ksuser.dll - C:\Windows\syswow64\ksuser.dll - Microsoft Corporation
             msmpeg2vdec.dll - C:\Windows\syswow64\msmpeg2vdec.dll - Microsoft Corporation
             EVR.dll - C:\Windows\syswow64\EVR.dll - Microsoft Corporation
             slc.dll - C:\Windows\syswow64\slc.dll - Microsoft Corporation
             sqmapi.dll - C:\Windows\syswow64\sqmapi.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\syswow64\bcrypt.dll - Microsoft Corporation
             nvapi.dll - C:\Windows\syswow64\nvapi.dll - NVIDIA Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ipsecsvc.dll - c:\windows\system32\ipsecsvc.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             fwpuclnt.dll - c:\windows\system32\fwpuclnt.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             FwRemoteSvr.DLL - c:\windows\system32\FwRemoteSvr.DLL - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RaUI.exe]Modules
             RaUI.exe - C:\Program Files (x86)\EDIMAX\Common\RaUI.exe - Edimax Technology Co., Ltd.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             wlanui.dll - C:\Windows\syswow64\wlanui.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             eappcfg.dll - C:\Windows\syswow64\eappcfg.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\syswow64\UxTheme.dll - Microsoft Corporation
             wlanutil.dll - C:\Windows\syswow64\wlanutil.dll - Microsoft Corporation
             OneX.DLL - C:\Windows\syswow64\OneX.DLL - Microsoft Corporation
             eappprxy.dll - C:\Windows\syswow64\eappprxy.dll - Microsoft Corporation
             Wlanapi.dll - C:\Windows\syswow64\Wlanapi.dll - Microsoft Corporation
             wlanhlp.dll - C:\Windows\syswow64\wlanhlp.dll - Microsoft Corporation
             ATL.DLL - C:\Windows\syswow64\ATL.DLL - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\syswow64\IPHLPAPI.DLL - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\Windows\syswow64\WINNSI.DLL - Microsoft Corporation
             gdiplus.dll - C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_72d273598668a06b\gdiplus.dll - Microsoft Corporation
             DUI70.dll - C:\Windows\syswow64\DUI70.dll - Microsoft Corporation
             credui.dll - C:\Windows\syswow64\credui.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\syswow64\comdlg32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\COMCTL32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\syswow64\WINSPOOL.DRV - Microsoft Corporation
             oledlg.dll - C:\Windows\syswow64\oledlg.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\syswow64\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\syswow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\syswow64\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[mdm.exe]Modules
             mdm.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\syswow64\apphelp.dll - Microsoft Corporation
             AcWow64.DLL - C:\Windows\AppPatch\AcWow64.DLL - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             mdmui.dll - C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\1029\mdmui.dll - Microsoft Corporation
             psapi.dll - C:\Windows\syswow64\psapi.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\syswow64\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\syswow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\syswow64\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             csm.dll - c:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\csm.dll - Microsoft Corporation
             MSDBG2.DLL - C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MSDBG2.DLL - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Modules
             wmiprvse.exe - C:\Windows\system32\wbem\wmiprvse.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             FastProx.dll - C:\Windows\system32\wbem\FastProx.dll - Microsoft Corporation
             NTDSAPI.dll - C:\Windows\system32\NTDSAPI.dll - Microsoft Corporation
             NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             wbemprox.dll - C:\Windows\system32\wbem\wbemprox.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\system32\wbem\wmiutils.dll - Microsoft Corporation
             cimwin32.dll - C:\Windows\system32\wbem\cimwin32.dll - Microsoft Corporation
             framedynos.dll - C:\Windows\system32\framedynos.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             WINBRAND.dll - C:\Windows\system32\WINBRAND.dll - Microsoft Corporation
             SECURITY.DLL - C:\Windows\system32\SECURITY.DLL - Microsoft Corporation
             SECUR32.DLL - C:\Windows\system32\SECUR32.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             schannel.DLL - C:\Windows\system32\schannel.DLL - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             NETAPI32.DLL - C:\Windows\system32\NETAPI32.DLL - Microsoft Corporation
             netutils.dll - C:\Windows\system32\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\system32\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\system32\wkscli.dll - Microsoft Corporation
             SAMCLI.DLL - C:\Windows\system32\SAMCLI.DLL - Microsoft Corporation
             LOGONCLI.DLL - C:\Windows\system32\LOGONCLI.DLL - Microsoft Corporation
             BROWCLI.DLL - C:\Windows\system32\BROWCLI.DLL - Microsoft Corporation
             SCHEDCLI.DLL - C:\Windows\system32\SCHEDCLI.DLL - Microsoft Corporation
             DSROLE.DLL - C:\Windows\system32\DSROLE.DLL - Microsoft Corporation
             cscapi.dll - C:\Windows\system32\cscapi.dll - Microsoft Corporation
             wmipcima.dll - C:\Windows\system32\wbem\wmipcima.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             WMI.DLL - C:\Windows\system32\WMI.DLL - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             POWRPROF.dll - C:\Windows\system32\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll - 
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll - 
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[spoolsv.exe]Modules
             spoolsv.exe - C:\Windows\System32\spoolsv.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             POWRPROF.dll - C:\Windows\System32\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\System32\DNSAPI.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\System32\CRYPTBASE.dll - Microsoft Corporation
             slc.dll - C:\Windows\System32\slc.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\System32\RpcRtRemote.dll - Microsoft Corporation
             secur32.dll - C:\Windows\System32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\System32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\System32\credssp.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\System32\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\System32\WINSTA.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\System32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\System32\WINNSI.DLL - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\System32\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\System32\fwpuclnt.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             umb.dll - C:\Windows\system32\umb.dll - Microsoft Corporation
             ATL.DLL - C:\Windows\system32\ATL.DLL - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             localspl.dll - C:\Windows\System32\localspl.dll - Microsoft Corporation
             SPOOLSS.DLL - C:\Windows\System32\SPOOLSS.DLL - Microsoft Corporation
             srvcli.dll - C:\Windows\System32\srvcli.dll - Microsoft Corporation
             winspool.drv - C:\Windows\system32\winspool.drv - Microsoft Corporation
             PrintIsolationProxy.dll - C:\Windows\System32\PrintIsolationProxy.dll - Microsoft Corporation
             HP1100LM.DLL - C:\Windows\System32\HP1100LM.DLL - 
             PSAPI.DLL - C:\Windows\system32\PSAPI.DLL - Microsoft Corporation
             FXSMON.DLL - C:\Windows\System32\FXSMON.DLL - Microsoft Corporation
             PDFreDirectMon64.dll - C:\Windows\System32\PDFreDirectMon64.dll - 
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             tcpmon.dll - C:\Windows\System32\tcpmon.dll - Microsoft Corporation
             snmpapi.dll - C:\Windows\System32\snmpapi.dll - Microsoft Corporation
             wsnmp32.dll - C:\Windows\System32\wsnmp32.dll - Microsoft Corporation
             msxml6.dll - C:\Windows\System32\msxml6.dll - Microsoft Corporation
             usbmon.dll - C:\Windows\System32\usbmon.dll - Microsoft Corporation
             wls0wndh.dll - C:\Windows\system32\wls0wndh.dll - Microsoft Corporation
             WSDMon.dll - C:\Windows\System32\WSDMon.dll - Microsoft Corporation
             wsdapi.dll - C:\Windows\System32\wsdapi.dll - Microsoft Corporation
             webservices.dll - C:\Windows\System32\webservices.dll - Microsoft Corporation
             FirewallAPI.dll - C:\Windows\System32\FirewallAPI.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\System32\VERSION.dll - Microsoft Corporation
             FunDisc.dll - C:\Windows\system32\FunDisc.dll - Microsoft Corporation
             fdPnp.dll - C:\Windows\system32\fdPnp.dll - Microsoft Corporation
             winprint.dll - C:\Windows\system32\spool\PRTPROCS\x64\winprint.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\System32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\System32\GPAPI.dll - Microsoft Corporation
             HP1100PP.DLL - C:\Windows\system32\spool\PRTPROCS\x64\HP1100PP.DLL - 
             dsrole.dll - C:\Windows\System32\dsrole.dll - Microsoft Corporation
             win32spl.dll - C:\Windows\System32\win32spl.dll - Microsoft Corporation
             DEVRTL.dll - C:\Windows\System32\DEVRTL.dll - Microsoft Corporation
             SPINF.dll - C:\Windows\System32\SPINF.dll - Microsoft Corporation
             inetpp.dll - C:\Windows\System32\inetpp.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\System32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             netutils.dll - C:\Windows\System32\netutils.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\System32\cscapi.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[avp.exe]Modules
             avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             ushata.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ushata.dll - Kaspersky Lab ZAO
             avpinit.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpinit.dll - Kaspersky Lab ZAO
             fltLib.dll - C:\Windows\syswow64\fltLib.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             user32.dll - C:\Windows\syswow64\user32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             avpservice.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpservice.dll - Kaspersky Lab ZAO
             MSVCP100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             avpmain.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avpmain.dll - Kaspersky Lab ZAO
             POWRPROF.dll - C:\Windows\syswow64\POWRPROF.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             fssync.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fssync.DLL - Kaspersky Lab ZAO
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             service.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\service.dll - Kaspersky Lab ZAO
             prremote.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.DLL - Kaspersky Lab ZAO
             prloader.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prloader.dll - Kaspersky Lab ZAO
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             userenv.dll - C:\Windows\syswow64\userenv.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             nfio.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\nfio.ppl - Kaspersky Lab ZAO
             MPR.dll - C:\Windows\syswow64\MPR.dll - Microsoft Corporation
             fsdrvplg.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fsdrvplg.ppl - Kaspersky Lab ZAO
             winreg.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\winreg.ppl - Kaspersky Lab ZAO
             pxstub.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\pxstub.ppl - Kaspersky Lab ZAO
             params.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\params.ppl - Kaspersky Lab ZAO
             app_core_legacy.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\app_core_legacy.dll - Kaspersky Lab ZAO
             key_value_storage.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\key_value_storage.DLL - Kaspersky Lab ZAO
             eka_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\eka_meta.dll - Kaspersky Lab ZAO
             updater_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\updater_meta.dll - Kaspersky Lab ZAO
             content_filtering_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\content_filtering_meta.dll - Kaspersky Lab ZAO
             am_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\am_meta.dll - Kaspersky Lab ZAO
             ac_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ac_meta.dll - Kaspersky Lab ZAO
             app_core_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\app_core_meta.dll - Kaspersky Lab ZAO
             product_metainfo.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\product_metainfo.dll - Kaspersky Lab ZAO
             plugins_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\plugins_meta.dll - Kaspersky Lab ZAO
             ksn_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksn_meta.dll - Kaspersky Lab ZAO
             ucp_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ucp_meta.dll - Kaspersky Lab ZAO
             klifpp_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klifpp_meta.dll - Kaspersky Lab ZAO
             instrumental_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\instrumental_meta.dll - Kaspersky Lab ZAO
             storage.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\storage.dll - Kaspersky Lab ZAO
             ichecker.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ichecker.dll - Kaspersky Lab ZAO
             klifpp.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\klifpp.dll - Kaspersky Lab ZAO
             ksn_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksn_facade.dll - Kaspersky Lab ZAO
             acassembler.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\acassembler.dll - Kaspersky Lab ZAO
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             ckahum.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ckahum.dll - Kaspersky Lab ZAO
             CKAHComm.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\CKAHComm.dll - Kaspersky Lab ZAO
             ckahrule.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ckahrule.dll - Kaspersky Lab ZAO
             IPHLPAPI.DLL - C:\Windows\syswow64\IPHLPAPI.DLL - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             WINNSI.DLL - C:\Windows\syswow64\WINNSI.DLL - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             thpimpl.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\thpimpl.ppl - Kaspersky Lab ZAO
             propmap.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\propmap.ppl - Kaspersky Lab ZAO
             tm.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\tm.ppl - Kaspersky Lab ZAO
             dtreg.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dtreg.ppl - Kaspersky Lab ZAO
             bl.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\bl.ppl - Kaspersky Lab ZAO
             libcurl.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\libcurl.dll - The cURL library, http://curl.haxx.se/
             LIBEAY32.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\LIBEAY32.dll - The OpenSSL Project, http://www.openssl.org/
             WSOCK32.dll - C:\Windows\syswow64\WSOCK32.dll - Microsoft Corporation
             SSLEAY32.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\SSLEAY32.dll - The OpenSSL Project, http://www.openssl.org/
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             wmihlpr.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\wmihlpr.ppl - Kaspersky Lab ZAO
             vercheck.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\vercheck.ppl - Kaspersky Lab ZAO
             regmap.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\regmap.ppl - Kaspersky Lab ZAO
             localization_manager.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\localization_manager.dll - Kaspersky Lab ZAO
             threats_disinfection.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\threats_disinfection.dll - Kaspersky Lab ZAO
             am_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\am_facade.dll - Kaspersky Lab ZAO
             ndetect.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ndetect.ppl - Kaspersky Lab ZAO
             crpthlpr.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\crpthlpr.ppl - Kaspersky Lab ZAO
             wtsapi32.dll - C:\Windows\syswow64\wtsapi32.dll - Microsoft Corporation
             report.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\report.ppl - Kaspersky Lab ZAO
             cf_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\cf_facade.dll - Kaspersky Lab ZAO
             kpcengine.2.2.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\kpcengine.2.2.dll - 
             icuin40.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icuin40.dll - IBM Corporation and others
             icuuc40.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icuuc40.dll - IBM Corporation and others
             icudt40.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icudt40.dll - IBM Corporation and others
             icuio40.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\icuio40.dll - IBM Corporation and others
             schedule.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\schedule.ppl - Kaspersky Lab ZAO
             timer.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\timer.ppl - Kaspersky Lab ZAO
             reportdb.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\reportdb.ppl - Kaspersky Lab ZAO
             ksnhelper.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksnhelper.dll - Kaspersky Lab ZAO
             packed_io.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\packed_io.dll - Kaspersky Lab ZAO
             ProcessMonitor.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ProcessMonitor.dll - Kaspersky Lab ZAO
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             excludemanager.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\excludemanager.dll - Kaspersky Lab ZAO
             sfdb.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\sfdb.ppl - Kaspersky Lab ZAO
             format_recognizer.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\format_recognizer.dll - Kaspersky Lab ZAO
             lic.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\lic.ppl - Kaspersky Lab ZAO
             cbi.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\cbi.dll - Kaspersky Lab ZAO
             hashmd5.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\hashmd5.ppl - Kaspersky Lab ZAO
             ThreatsManager.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ThreatsManager.dll - Kaspersky Lab ZAO
             qb.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\qb.ppl - Kaspersky Lab ZAO
             prutil.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prutil.ppl - Kaspersky Lab ZAO
             avs.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avs.ppl - Kaspersky Lab ZAO
             dmap.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\dmap.ppl - Kaspersky Lab ZAO
             ksn_client.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksn_client.dll - Kaspersky Lab ZAO
             transport_provider.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\transport_provider.dll - Kaspersky Lab ZAO
             CryptoStaticProvider.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\CryptoStaticProvider.dll - Kaspersky Lab ZAO
             CRYPTSP.dll - C:\Windows\syswow64\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\syswow64\rsaenh.dll - Microsoft Corporation
             uds.dll.92dff4ee3f31d4a8028788006d921d26 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\uds.dll.92dff4ee3f31d4a8028788006d921d26 - Kaspersky Lab ZAO
             avengine.dll.c7e81bee01af0a4599865c8685990873 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\avengine.dll.c7e81bee01af0a4599865c8685990873 - Kaspersky Lab ZAO
             kavbase.kdl.5e27e54f3b4175e0e6dfee726b87a311 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\kavbase.kdl.5e27e54f3b4175e0e6dfee726b87a311 - Kaspersky Lab ZAO
             ucp_agent.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ucp_agent.dll - Kaspersky Lab ZAO
             persistent_queue.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\persistent_queue.dll - Kaspersky Lab ZAO
             filesystem_services.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\filesystem_services.dll - Kaspersky Lab ZAO
             klavemu.kdl.1b87346303021c84ecc99a3f7cd1ab73 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\klavemu.kdl.1b87346303021c84ecc99a3f7cd1ab73 - Kaspersky Lab ZAO
             kjim.kdl.a918b448be75f1e6825549ddb6692d7a - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\kjim.kdl.a918b448be75f1e6825549ddb6692d7a - Kaspersky Lab ZAO
             mark.kdl.fed411a74cc5c5dac6ac7d81339fc781 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\mark.kdl.fed411a74cc5c5dac6ac7d81339fc781 - Kaspersky Lab ZAO
             imagehlp.dll - C:\Windows\syswow64\imagehlp.dll - Microsoft Corporation
             vlns.kdl.317df7c0eff0939e6289f5c72f65ba51 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\vlns.kdl.317df7c0eff0939e6289f5c72f65ba51 - Kaspersky Lab ZAO
             qscan.kdl.fb1fec251baaa2ab4237fb3cff510751 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\qscan.kdl.fb1fec251baaa2ab4237fb3cff510751 - Kaspersky Lab ZAO
             pbs.kdl.7fc520e215b0b2b41fa2e224fe8f6030 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\pbs.kdl.7fc520e215b0b2b41fa2e224fe8f6030 - Kaspersky Lab ZAO
             ncrypt.dll - C:\Windows\syswow64\ncrypt.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\syswow64\bcrypt.dll - Microsoft Corporation
             bcryptprimitives.dll - C:\Windows\SysWOW64\bcryptprimitives.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\syswow64\GPAPI.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\syswow64\WINSTA.dll - Microsoft Corporation
             avzkrnl.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avzkrnl.dll - Kaspersky Lab
             comctl32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll - Microsoft Corporation
             winspool.drv - C:\Windows\syswow64\winspool.drv - Microsoft Corporation
             wininet.dll - C:\Windows\syswow64\wininet.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\syswow64\urlmon.dll - Microsoft Corporation
             comdlg32.dll - C:\Windows\syswow64\comdlg32.dll - Microsoft Corporation
             kavsys.kdl.7b53984bb934e599a4e3668b2f678d48 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\kavsys.kdl.7b53984bb934e599a4e3668b2f678d48 - Kaspersky Lab ZAO
             arkmon.kdl.92baa7debedc6ebe803bc14bc5180ab3 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\arkmon.kdl.92baa7debedc6ebe803bc14bc5180ab3 - Kaspersky Lab ZAO
             msi.dll - C:\Windows\syswow64\msi.dll - Microsoft Corporation
             stat.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\stat.ppl - Kaspersky Lab ZAO
             ac_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ac_facade.dll - Kaspersky Lab ZAO
             procmon.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\procmon.ppl - Kaspersky Lab ZAO
             netwatch.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\netwatch.ppl - Kaspersky Lab ZAO
             RASAPI32.dll - C:\Windows\syswow64\RASAPI32.dll - Microsoft Corporation
             rasman.dll - C:\Windows\syswow64\rasman.dll - Microsoft Corporation
             wlanapi.dll - C:\Windows\syswow64\wlanapi.dll - Microsoft Corporation
             wlanutil.dll - C:\Windows\syswow64\wlanutil.dll - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\syswow64\dhcpcsvc.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\syswow64\dhcpcsvc6.DLL - Microsoft Corporation
             memmon.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\memmon.dll - Kaspersky Lab ZAO
             safe_banking.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\safe_banking.dll - Kaspersky Lab ZAO
             ekasyswatch.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ekasyswatch.dll - Kaspersky Lab ZAO
             sc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\sc.ppl - Kaspersky Lab ZAO
             hips.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\hips.ppl - Kaspersky Lab ZAO
             antispam.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\antispam.ppl - Kaspersky Lab ZAO
             mc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\mc.ppl - Kaspersky Lab ZAO
             ahids.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ahids.ppl - Kaspersky Lab ZAO
             oas.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\oas.ppl - Kaspersky Lab ZAO
             imc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imc.ppl - Kaspersky Lab ZAO
             mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             httpscan.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\httpscan.ppl - Kaspersky Lab ZAO
             plugins_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\plugins_facade.dll - Kaspersky Lab ZAO
             webnetstat.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\webnetstat.ppl - Kaspersky Lab ZAO
             volenum.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\volenum.ppl - Kaspersky Lab ZAO
             EXTLprtc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\EXTLprtc.ppl - Kaspersky Lab ZAO
             smtpprtc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\smtpprtc.ppl - Kaspersky Lab ZAO
             wshtcpip.dll - C:\Windows\Syswow64\wshtcpip.dll - Microsoft Corporation
             appcat.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\appcat.ppl - Kaspersky Lab ZAO
             wship6.dll - C:\Windows\Syswow64\wship6.dll - Microsoft Corporation
             ICQprtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ICQprtc.dll - Kaspersky Lab ZAO
             netapi32.dll - C:\Windows\syswow64\netapi32.dll - Microsoft Corporation
             netutils.dll - C:\Windows\syswow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\syswow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\syswow64\wkscli.dll - Microsoft Corporation
             pop3prtc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\pop3prtc.ppl - Kaspersky Lab ZAO
             trafmon2.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\trafmon2.ppl - Kaspersky Lab ZAO
             MSNprtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSNprtc.dll - Kaspersky Lab ZAO
             klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - Kaspersky Lab ZAO
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             integrity_control.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\integrity_control.dll - Kaspersky Lab ZAO
             JbrPrtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\JbrPrtc.dll - Kaspersky Lab ZAO
             imapprtc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\imapprtc.ppl - Kaspersky Lab ZAO
             FileCategorizer.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FileCategorizer.dll - Kaspersky Lab ZAO
             nntpprtc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\nntpprtc.ppl - Kaspersky Lab ZAO
             IRCPrtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\IRCPrtc.dll - Kaspersky Lab ZAO
             Yhoprtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\Yhoprtc.dll - Kaspersky Lab ZAO
             MMPprtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MMPprtc.dll - Kaspersky Lab ZAO
             aphishex.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\aphishex.ppl - Kaspersky Lab ZAO
             sys_critical_obj.dll - C:\ProgramData\Kaspersky Lab\AVP13\Bases\sys_critical_obj.dll - Kaspersky Lab ZAO
             proxydet.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\proxydet.ppl - Kaspersky Lab ZAO
             Updater.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\Updater.dll - Kaspersky Lab ZAO
             diffs.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\diffs.dll - Kaspersky Lab ZAO
             WINHTTP.dll - C:\Windows\syswow64\WINHTTP.dll - Microsoft Corporation
             webio.dll - C:\Windows\syswow64\webio.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\syswow64\DNSAPI.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\syswow64\rasadhlp.dll - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\Syswow64\fwpuclnt.dll - Microsoft Corporation
             credssp.dll - C:\Windows\syswow64\credssp.dll - Microsoft Corporation
             NLAapi.dll - C:\Windows\syswow64\NLAapi.dll - Microsoft Corporation
             napinsp.dll - C:\Windows\syswow64\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\syswow64\pnrpnsp.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\Syswow64\winrnr.dll - Microsoft Corporation
             finance_url_categorizer.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\finance_url_categorizer.dll - Kaspersky Lab ZAO
             cf_anti_malware_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\cf_anti_malware_facade.dll - Kaspersky Lab ZAO
             vulnerability_status_provider.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\vulnerability_status_provider.dll - Kaspersky Lab ZAO
             uniarc.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\uniarc.ppl - Kaspersky Lab ZAO
             minizip.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\minizip.ppl - Kaspersky Lab ZAO
             network_services.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\network_services.dll - Kaspersky Lab ZAO
             cab.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\cab.ppl - Kaspersky Lab ZAO
             arj.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\arj.ppl - Kaspersky Lab ZAO
             httpanlz.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\httpanlz.ppl - Kaspersky Lab ZAO
             rar.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\rar.ppl - Kaspersky Lab ZAO
             pdm.kdl.be99d2031eb3aa6699eecce74df88b01 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\pdm.kdl.be99d2031eb3aa6699eecce74df88b01 - Kaspersky Lab ZAO
             traffic_processing_product_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\traffic_processing_product_facade.dll - Kaspersky Lab ZAO
             lha.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\lha.ppl - Kaspersky Lab ZAO
             url_processing.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\url_processing.dll - Kaspersky Lab ZAO
             bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe - Kaspersky Lab ZAO
             office_antivirus_facade.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\office_antivirus_facade.dll - Kaspersky Lab ZAO
             swpragueplugin.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\swpragueplugin.dll - Kaspersky Lab ZAO
             mdb.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\mdb.ppl - Kaspersky Lab ZAO
             cf_prague_adapter.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\cf_prague_adapter.ppl - Kaspersky Lab ZAO
             mapi32.dll - C:\Windows\syswow64\mapi32.dll - Microsoft Corporation
             FTPprtc.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\FTPprtc.dll - Kaspersky Lab ZAO
             msoe.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\msoe.ppl - Kaspersky Lab ZAO
             cf_response_provider.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\cf_response_provider.dll - Kaspersky Lab ZAO
             mailmsg.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\mailmsg.ppl - Kaspersky Lab ZAO
             anti_phishing_http_filter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\anti_phishing_http_filter.dll - Kaspersky Lab ZAO
             wdiskio.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\wdiskio.ppl - Kaspersky Lab ZAO
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             cryptnet.dll - C:\Windows\syswow64\cryptnet.dll - Microsoft Corporation
             ksn_statistics.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ksn_statistics.dll - Kaspersky Lab ZAO
             apphelp.dll - C:\Windows\syswow64\apphelp.dll - Microsoft Corporation
             buffer.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\buffer.ppl - Kaspersky Lab ZAO
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             bfe.dll - c:\windows\system32\bfe.dll - Microsoft Corporation
             AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             slc.dll - c:\windows\system32\slc.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             pcwum.dll - C:\Windows\system32\pcwum.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             FirewallAPI.dll - c:\windows\system32\FirewallAPI.dll - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             fwpuclnt.dll - c:\windows\system32\fwpuclnt.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             dhcpcsvc6.DLL - C:\Windows\system32\dhcpcsvc6.DLL - Microsoft Corporation
             dhcpcsvc.DLL - C:\Windows\system32\dhcpcsvc.DLL - Microsoft Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wship6.dll - C:\Windows\System32\wship6.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             wfapigp.dll - C:\Windows\system32\wfapigp.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             dps.dll - c:\windows\system32\dps.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             taskschd.dll - C:\Windows\system32\taskschd.dll - Microsoft Corporation
             wdi.dll - C:\Windows\system32\wdi.dll - Microsoft Corporation
             netprofm.dll - C:\Windows\System32\netprofm.dll - Microsoft Corporation
             nlaapi.dll - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
             diagperf.dll - C:\Windows\system32\diagperf.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             pnpts.dll - C:\Windows\system32\pnpts.dll - Microsoft Corporation
             pots.dll - C:\Windows\system32\pots.dll - Microsoft Corporation
             tdh.dll - C:\Windows\system32\tdh.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             radardt.dll - C:\Windows\system32\radardt.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             npmproxy.dll - C:\Windows\System32\npmproxy.dll - Microsoft Corporation
             wdiasqmmodule.dll - C:\Windows\system32\wdiasqmmodule.dll - Microsoft Corporation
             bcrypt.dll - C:\Windows\system32\bcrypt.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[armsvc.exe]Modules
             armsvc.exe - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - Adobe Systems Incorporated
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             MSVCR90.dll - C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\MSVCR90.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvxdsync.exe]Modules
             nvxdsync.exe - C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - NVIDIA Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             nvxdapix.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - NVIDIA Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             NvUI.dll - C:\Program Files\NVIDIA Corporation\Display\NvUI.dll - NVIDIA Corporation
             gdiplus.dll - C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\gdiplus.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             MSIMG32.dll - C:\Windows\system32\MSIMG32.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\system32\COMDLG32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\COMCTL32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\system32\WINSPOOL.DRV - Microsoft Corporation
             OLEACC.dll - C:\Windows\system32\OLEACC.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             nvumdshimx.dll - C:\Windows\system32\nvumdshimx.dll - NVIDIA Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             nvapi64.dll - C:\Windows\system32\nvapi64.dll - NVIDIA Corporation
             nvxdbat.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll - NVIDIA Corporation
             nvxdplcy.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll - NVIDIA Corporation
             NvSmartMax64.dll - C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll - 
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvvsvc.exe]Modules
             nvvsvc.exe - C:\Windows\system32\nvvsvc.exe - NVIDIA Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             NVSVC64.DLL - C:\Windows\system32\NVSVC64.DLL - NVIDIA Corporation
             mscms.dll - C:\Windows\system32\mscms.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll - Microsoft Corporation
             MSIMG32.dll - C:\Windows\system32\MSIMG32.dll - Microsoft Corporation
             POWRPROF.dll - C:\Windows\system32\POWRPROF.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\system32\PSAPI.DLL - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\system32\COMDLG32.dll - Microsoft Corporation
             nvapi64.dll - C:\Windows\system32\nvapi64.dll - NVIDIA Corporation
             uxtheme.dll - C:\Windows\system32\uxtheme.dll - Microsoft Corporation
             NVSVCR.DLL - C:\Windows\system32\NVSVCR.DLL - NVIDIA Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             nvxdbat.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdbat.dll - NVIDIA Corporation
             nvxdplcy.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdplcy.dll - NVIDIA Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[HPSIsvc.exe]Modules
             HPSIsvc.exe - C:\Windows\system32\HPSIsvc.exe - HP
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             wls0wndh.dll - C:\Windows\system32\wls0wndh.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nusb3mon.exe]Modules
             nusb3mon.exe - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe - NEC Electronics Corporation
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             nusb3mon.dll - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll - NEC Electronics Corporation
             SETUPAPI.dll - C:\Windows\syswow64\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\syswow64\CFGMGR32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\syswow64\DEVOBJ.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskeng.exe]Modules
             taskeng.exe - C:\Windows\system32\taskeng.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ktmw32.dll - C:\Windows\system32\ktmw32.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\system32\wevtapi.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             tschannel.dll - C:\Windows\system32\tschannel.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\system32\uxtheme.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\system32\XmlLite.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskeng.exe]Modules
             taskeng.exe - C:\Windows\system32\taskeng.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ktmw32.dll - C:\Windows\system32\ktmw32.dll - Microsoft Corporation
             wevtapi.dll - C:\Windows\system32\wevtapi.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\system32\SspiCli.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             tschannel.dll - C:\Windows\system32\tschannel.dll - Microsoft Corporation
             XmlLite.dll - C:\Windows\system32\XmlLite.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PnkBstrA.exe]Modules
             PnkBstrA.exe - C:\Windows\SysWOW64\PnkBstrA.exe - 
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             WSOCK32.dll - C:\Windows\SysWOW64\WSOCK32.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\Syswow64\wshtcpip.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[szninstall.exe]Modules
             szninstall.exe - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\szninstall.exe - 
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\syswow64\COMDLG32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             WININET.dll - C:\Windows\syswow64\WININET.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\syswow64\urlmon.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\syswow64\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\syswow64\NSI.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PsiService_2.exe]Modules
             PsiService_2.exe - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe - Protexis Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\syswow64\WINSPOOL.DRV - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_ec83dffa859149af\COMCTL32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchProtocolHost.exe]Modules
             SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             TQUERY.DLL - C:\Windows\system32\TQUERY.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             MSSHooks.dll - C:\Windows\system32\MSSHooks.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             Msidle.dll - C:\Windows\system32\Msidle.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\system32\mssprxy.dll - Microsoft Corporation
             mssvp.dll - C:\Windows\system32\mssvp.dll - Microsoft Corporation
             MAPI32.dll - C:\Windows\system32\MAPI32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\system32\cscapi.dll - Microsoft Corporation
             cscobj.dll - C:\Windows\System32\cscobj.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\System32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\System32\profapi.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RalinkRegistryWriter.exe]Modules
             RalinkRegistryWriter.exe - C:\Program Files (x86)\EDIMAX\Common\RalinkRegistryWriter.exe - 
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             secur32.dll - C:\Windows\syswow64\secur32.dll - Microsoft Corporation
             credssp.dll - C:\Windows\syswow64\credssp.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Modules
             svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             wiaservc.dll - c:\windows\system32\wiaservc.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             VERSION.dll - c:\windows\system32\VERSION.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             wiatrace.dll - C:\Windows\system32\wiatrace.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             msv1_0.DLL - C:\Windows\system32\msv1_0.DLL - Microsoft Corporation
             cryptdll.dll - C:\Windows\system32\cryptdll.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[GoogleCrashHandler.exe]Modules
             GoogleCrashHandler.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             NETAPI32.dll - C:\Windows\syswow64\NETAPI32.dll - Microsoft Corporation
             netutils.dll - C:\Windows\syswow64\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\syswow64\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\syswow64\wkscli.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\syswow64\cscapi.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\syswow64\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\syswow64\WLDAP32.dll - Microsoft Corporation
             dbghelp.dll - C:\Windows\syswow64\dbghelp.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[GoogleCrashHandler64.exe]Modules
             GoogleCrashHandler64.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe - Google Inc.
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             NETAPI32.dll - C:\Windows\system32\NETAPI32.dll - Microsoft Corporation
             netutils.dll - C:\Windows\system32\netutils.dll - Microsoft Corporation
             srvcli.dll - C:\Windows\system32\srvcli.dll - Microsoft Corporation
             wkscli.dll - C:\Windows\system32\wkscli.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             cscapi.dll - C:\Windows\system32\cscapi.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             dbghelp.dll - C:\Windows\system32\dbghelp.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvtray.exe]Modules
             nvtray.exe - C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - NVIDIA Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.17514_none_a4d6a923711520a9\COMCTL32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             NvUI.dll - C:\Program Files\NVIDIA Corporation\Display\NvUI.dll - NVIDIA Corporation
             gdiplus.dll - C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\gdiplus.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             MSIMG32.dll - C:\Windows\system32\MSIMG32.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\system32\COMDLG32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\system32\WINSPOOL.DRV - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             OLEACC.dll - C:\Windows\system32\OLEACC.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             NvUpdt.dll - C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll - NVIDIA Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll - Microsoft Corporation
             easyDaemonAPIU64.DLL - C:\Program Files\NVIDIA Corporation\Update Common\easyDaemonAPIU64.DLL - NVIDIA Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             NVUPDTR.DLL - C:\Program Files\NVIDIA Corporation\Update Common\NVUPDTR.DLL - NVIDIA Corporation
             mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             wshtcpip.dll - C:\Windows\System32\wshtcpip.dll - Microsoft Corporation
             NLAapi.dll - C:\Windows\system32\NLAapi.dll - Microsoft Corporation
             napinsp.dll - C:\Windows\system32\napinsp.dll - Microsoft Corporation
             pnrpnsp.dll - C:\Windows\system32\pnrpnsp.dll - Microsoft Corporation
             DNSAPI.dll - C:\Windows\system32\DNSAPI.dll - Microsoft Corporation
             winrnr.dll - C:\Windows\System32\winrnr.dll - Microsoft Corporation
             IPHLPAPI.DLL - C:\Windows\system32\IPHLPAPI.DLL - Microsoft Corporation
             WINNSI.DLL - C:\Windows\system32\WINNSI.DLL - Microsoft Corporation
             fwpuclnt.dll - C:\Windows\System32\fwpuclnt.dll - Microsoft Corporation
             rasadhlp.dll - C:\Windows\system32\rasadhlp.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchFilterHost.exe]Modules
             SearchFilterHost.exe - C:\Windows\system32\SearchFilterHost.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             TQUERY.DLL - C:\Windows\system32\TQUERY.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             MSSHooks.dll - C:\Windows\system32\MSSHooks.dll - Microsoft Corporation
             mscoree.dll - C:\Windows\system32\mscoree.dll - Microsoft Corporation
             mscoreei.dll - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\system32\mssprxy.dll - Microsoft Corporation
             SXS.DLL - C:\Windows\system32\SXS.DLL - Microsoft Corporation
             query.dll - C:\Windows\system32\query.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll - 
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll - 
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RAVCpl64.exe]Modules
             RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             DSOUND.dll - C:\Windows\system32\DSOUND.dll - Microsoft Corporation
             POWRPROF.dll - C:\Windows\system32\POWRPROF.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\system32\VERSION.dll - Microsoft Corporation
             PROPSYS.dll - C:\Windows\system32\PROPSYS.dll - Microsoft Corporation
             UxTheme.dll - C:\Windows\system32\UxTheme.dll - Microsoft Corporation
             gdiplus.dll - C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\gdiplus.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             OPENGL32.dll - C:\Windows\system32\OPENGL32.dll - Microsoft Corporation
             GLU32.dll - C:\Windows\system32\GLU32.dll - Microsoft Corporation
             DDRAW.dll - C:\Windows\system32\DDRAW.dll - Microsoft Corporation
             DCIMAN32.dll - C:\Windows\system32\DCIMAN32.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\system32\dwmapi.dll - Microsoft Corporation
             MSIMG32.dll - C:\Windows\system32\MSIMG32.dll - Microsoft Corporation
             COMDLG32.dll - C:\Windows\system32\COMDLG32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\COMCTL32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             WINSPOOL.DRV - C:\Windows\system32\WINSPOOL.DRV - Microsoft Corporation
             oledlg.dll - C:\Windows\system32\oledlg.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             WINTRUST.dll - C:\Windows\system32\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             WindowsCodecs.dll - C:\Windows\system32\WindowsCodecs.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             MMDevApi.dll - C:\Windows\System32\MMDevApi.dll - Microsoft Corporation
             AUDIOSES.DLL - C:\Windows\system32\AUDIOSES.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             dbghelp.dll - C:\Windows\syswow64\dbghelp.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             content_blocker_npapi.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkgaeecgjhjkannahfamoehjmkjail\13.0.1.4190_0\plugin\content_blocker_npapi.dll - Kaspersky Lab ZAO
             remote_eka_prague_loader.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\remote_eka_prague_loader.dll - Kaspersky Lab ZAO
             prremote.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.dll - Kaspersky Lab ZAO
             MSVCP100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCP100.dll - Microsoft Corporation
             MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             prloader.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prloader.dll - Kaspersky Lab ZAO
             RpcRtRemote.dll - C:\Windows\syswow64\RpcRtRemote.dll - Microsoft Corporation
             service.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\service.dll - Kaspersky Lab ZAO
             eka_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\eka_meta.dll - Kaspersky Lab ZAO
             plugins_meta.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\plugins_meta.dll - Kaspersky Lab ZAO
             pxstub.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\pxstub.ppl - Kaspersky Lab ZAO
             params.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\params.ppl - Kaspersky Lab ZAO
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[jusched.exe]Modules
             jusched.exe - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Sun Microsystems, Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             WININET.dll - C:\Windows\syswow64\WININET.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             Normaliz.dll - C:\Windows\syswow64\Normaliz.dll - Microsoft Corporation
             iertutil.dll - C:\Windows\syswow64\iertutil.dll - Microsoft Corporation
             urlmon.dll - C:\Windows\syswow64\urlmon.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchIndexer.exe]Modules
             SearchIndexer.exe - C:\Windows\system32\SearchIndexer.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             TQUERY.DLL - C:\Windows\system32\TQUERY.DLL - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             ESENT.dll - C:\Windows\system32\ESENT.dll - Microsoft Corporation
             IMM32.dll - C:\Windows\system32\IMM32.dll - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             psapi.dll - C:\Windows\system32\psapi.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\system32\SHELL32.dll - Microsoft Corporation
             profapi.dll - C:\Windows\system32\profapi.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             secur32.dll - C:\Windows\system32\secur32.dll - Microsoft Corporation
             SSPICLI.DLL - C:\Windows\system32\SSPICLI.DLL - Microsoft Corporation
             credssp.dll - C:\Windows\system32\credssp.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             Msidle.dll - C:\Windows\system32\Msidle.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             mssprxy.dll - C:\Windows\system32\mssprxy.dll - Microsoft Corporation
             propsys.dll - C:\Windows\system32\propsys.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             VSSAPI.DLL - C:\Windows\system32\VSSAPI.DLL - Microsoft Corporation
             ATL.DLL - C:\Windows\system32\ATL.DLL - Microsoft Corporation
             VssTrace.DLL - C:\Windows\system32\VssTrace.DLL - Microsoft Corporation
             samcli.dll - C:\Windows\system32\samcli.dll - Microsoft Corporation
             SAMLIB.dll - C:\Windows\system32\SAMLIB.dll - Microsoft Corporation
             netutils.dll - C:\Windows\system32\netutils.dll - Microsoft Corporation
             es.dll - C:\Windows\system32\es.dll - Microsoft Corporation
             CFGMGR32.dll - C:\Windows\system32\CFGMGR32.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\system32\WTSAPI32.dll - Microsoft Corporation
             WINSTA.dll - C:\Windows\system32\WINSTA.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\system32\USERENV.dll - Microsoft Corporation
             apphelp.dll - C:\Windows\system32\apphelp.dll - Microsoft Corporation
             SXS.DLL - C:\Windows\system32\SXS.DLL - Microsoft Corporation
             NaturalLanguage6.dll - C:\Windows\System32\NaturalLanguage6.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\system32\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\system32\MSASN1.dll - Microsoft Corporation
             NLSData0000.dll - C:\Windows\System32\NLSData0000.dll - Microsoft Corporation
             comctl32.dll - C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\comctl32.dll - Microsoft Corporation
             SETUPAPI.dll - C:\Windows\system32\SETUPAPI.dll - Microsoft Corporation
             DEVOBJ.dll - C:\Windows\system32\DEVOBJ.dll - Microsoft Corporation
             elscore.dll - C:\Windows\system32\elscore.dll - Microsoft Corporation
             ElsLad.dll - C:\Windows\system32\ElsLad.dll - Microsoft Corporation
             NLSData0009.dll - C:\Windows\System32\NLSData0009.dll - Microsoft Corporation
             NLSLexicons0009.dll - C:\Windows\System32\NLSLexicons0009.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Modules
             wmiprvse.exe - C:\Windows\system32\wbem\wmiprvse.exe - Microsoft Corporation
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\system32\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\system32\KERNELBASE.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\system32\RPCRT4.dll - Microsoft Corporation
             USER32.dll - C:\Windows\system32\USER32.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\system32\GDI32.dll - Microsoft Corporation
             LPK.dll - C:\Windows\system32\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\system32\USP10.dll - Microsoft Corporation
             wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\system32\OLEAUT32.dll - Microsoft Corporation
             ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             WS2_32.dll - C:\Windows\system32\WS2_32.dll - Microsoft Corporation
             NSI.dll - C:\Windows\system32\NSI.dll - Microsoft Corporation
             FastProx.dll - C:\Windows\system32\wbem\FastProx.dll - Microsoft Corporation
             NTDSAPI.dll - C:\Windows\system32\NTDSAPI.dll - Microsoft Corporation
             NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             IMM32.DLL - C:\Windows\system32\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\system32\CRYPTBASE.dll - Microsoft Corporation
             ntmarta.dll - C:\Windows\system32\ntmarta.dll - Microsoft Corporation
             WLDAP32.dll - C:\Windows\system32\WLDAP32.dll - Microsoft Corporation
             CLBCatQ.DLL - C:\Windows\system32\CLBCatQ.DLL - Microsoft Corporation
             wbemprox.dll - C:\Windows\system32\wbem\wbemprox.dll - Microsoft Corporation
             CRYPTSP.dll - C:\Windows\system32\CRYPTSP.dll - Microsoft Corporation
             rsaenh.dll - C:\Windows\system32\rsaenh.dll - Microsoft Corporation
             RpcRtRemote.dll - C:\Windows\system32\RpcRtRemote.dll - Microsoft Corporation
             wbemsvc.dll - C:\Windows\system32\wbem\wbemsvc.dll - Microsoft Corporation
             wmiutils.dll - C:\Windows\system32\wbem\wmiutils.dll - Microsoft Corporation
             wmiprov.dll - C:\Windows\system32\wbem\wmiprov.dll - Microsoft Corporation
             mofd.dll - C:\Windows\system32\wbem\mofd.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             dwmapi.dll - C:\Windows\syswow64\dwmapi.dll - Microsoft Corporation
             npABPlugin.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.1.4190_0\plugin\npABPlugin.dll - Kaspersky Lab ZAO
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Modules
             chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             kernel32.dll - C:\Windows\syswow64\kernel32.dll - Microsoft Corporation
             KERNELBASE.dll - C:\Windows\syswow64\KERNELBASE.dll - Microsoft Corporation
             SHLWAPI.dll - C:\Windows\syswow64\SHLWAPI.dll - Microsoft Corporation
             GDI32.dll - C:\Windows\syswow64\GDI32.dll - Microsoft Corporation
             USER32.dll - C:\Windows\syswow64\USER32.dll - Microsoft Corporation
             ADVAPI32.dll - C:\Windows\syswow64\ADVAPI32.dll - Microsoft Corporation
             msvcrt.dll - C:\Windows\syswow64\msvcrt.dll - Microsoft Corporation
             sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             RPCRT4.dll - C:\Windows\syswow64\RPCRT4.dll - Microsoft Corporation
             SspiCli.dll - C:\Windows\syswow64\SspiCli.dll - Microsoft Corporation
             CRYPTBASE.dll - C:\Windows\syswow64\CRYPTBASE.dll - Microsoft Corporation
             LPK.dll - C:\Windows\syswow64\LPK.dll - Microsoft Corporation
             USP10.dll - C:\Windows\syswow64\USP10.dll - Microsoft Corporation
             USERENV.dll - C:\Windows\syswow64\USERENV.dll - Microsoft Corporation
             profapi.dll - C:\Windows\syswow64\profapi.dll - Microsoft Corporation
             WTSAPI32.dll - C:\Windows\syswow64\WTSAPI32.dll - Microsoft Corporation
             VERSION.dll - C:\Windows\syswow64\VERSION.dll - Microsoft Corporation
             WINMM.dll - C:\Windows\syswow64\WINMM.dll - Microsoft Corporation
             IMM32.DLL - C:\Windows\syswow64\IMM32.DLL - Microsoft Corporation
             MSCTF.dll - C:\Windows\syswow64\MSCTF.dll - Microsoft Corporation
             SHELL32.dll - C:\Windows\syswow64\SHELL32.dll - Microsoft Corporation
             chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             WINTRUST.dll - C:\Windows\syswow64\WINTRUST.dll - Microsoft Corporation
             CRYPT32.dll - C:\Windows\syswow64\CRYPT32.dll - Microsoft Corporation
             MSASN1.dll - C:\Windows\syswow64\MSASN1.dll - Microsoft Corporation
             PSAPI.DLL - C:\Windows\syswow64\PSAPI.DLL - Microsoft Corporation
             OLEACC.dll - C:\Windows\syswow64\OLEACC.dll - Microsoft Corporation
             ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             COMCTL32.dll - C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\COMCTL32.dll - Microsoft Corporation
             Secur32.dll - C:\Windows\syswow64\Secur32.dll - Microsoft Corporation
             OLEAUT32.dll - C:\Windows\syswow64\OLEAUT32.dll - Microsoft Corporation
             dbghelp.dll - C:\Windows\syswow64\dbghelp.dll - Microsoft Corporation
             uxtheme.dll - C:\Windows\syswow64\uxtheme.dll - Microsoft Corporation
             icudt.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\icudt.dll - The ICU Project
             pdf.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll - 
             ppGoogleNaClPluginChrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll - 
             ffmpegsumo.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll - 
             ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             wow64.dll - C:\Windows\SYSTEM32\wow64.dll - Microsoft Corporation
             wow64win.dll - C:\Windows\SYSTEM32\wow64win.dll - Microsoft Corporation
             wow64cpu.dll - C:\Windows\SYSTEM32\wow64cpu.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Idle]Modules

==========================================================================================

Process Threads

      Image File Name[System]Threads
             8 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             12 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             16 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             20 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             24 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             28 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             32 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             36 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             40 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             44 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             48 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             52 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             56 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             60 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             64 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             68 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             72 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             76 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             80 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             84 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             88 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             92 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             96 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             100 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             104 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             108 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             112 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             116 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             120 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             124 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             128 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             164 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             168 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             172 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             176 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             180 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             184 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             188 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             192 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             200 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             204 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             208 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             212 - Wait - sptd.sys - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
             216 - Wait - sptd.sys - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
             220 - Wait - sptd.sys - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
             224 - Wait - ACPI.sys - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
             232 - Wait - ACPI.sys - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
             236 - Wait - ndis.sys - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
             240 - Wait - ndis.sys - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
             244 - Wait - ndis.sys - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
             260 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             264 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             268 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             272 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             276 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             280 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             284 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             288 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             292 - Wait - volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
             300 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             304 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             308 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             312 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             316 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             320 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             324 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             328 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             332 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             336 - Wait - klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
             340 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             344 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             348 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             352 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             356 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             360 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             364 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             368 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             372 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             376 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             380 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             384 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             388 - Wait - watchdog.sys - C:\Windows\System32\drivers\watchdog.sys - Microsoft Corporation
             392 - Wait - kltdi.sys - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
             400 - Wait - rdbss.sys - C:\Windows\system32\DRIVERS\rdbss.sys - Microsoft Corporation
             404 - Wait - blbdrive.sys - C:\Windows\system32\DRIVERS\blbdrive.sys - Microsoft Corporation
             408 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             432 - Wait - dxgkrnl.sys - C:\Windows\System32\drivers\dxgkrnl.sys - Microsoft Corporation
             436 - Wait - dxgkrnl.sys - C:\Windows\System32\drivers\dxgkrnl.sys - Microsoft Corporation
             448 - Wait - nusb3xhc.sys - C:\Windows\system32\DRIVERS\nusb3xhc.sys - NEC Electronics Corporation
             452 - Wait - nusb3xhc.sys - C:\Windows\system32\DRIVERS\nusb3xhc.sys - NEC Electronics Corporation
             492 - Wait - raspptp.sys - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
             496 - Wait - nusb3hub.sys - C:\Windows\system32\DRIVERS\nusb3hub.sys - NEC Electronics Corporation
             500 - Wait - nvhda64v.sys - C:\Windows\system32\drivers\nvhda64v.sys - NVIDIA Corporation
             504 - Wait - nvhda64v.sys - C:\Windows\system32\drivers\nvhda64v.sys - NVIDIA Corporation
             508 - Wait - nvhda64v.sys - C:\Windows\system32\drivers\nvhda64v.sys - NVIDIA Corporation
             512 - Wait - nvhda64v.sys - C:\Windows\system32\drivers\nvhda64v.sys - NVIDIA Corporation
             516 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             520 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             524 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             528 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             532 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             536 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             540 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             544 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             548 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             552 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             556 - Wait - RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
             612 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             616 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             620 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             624 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             628 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             632 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             636 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             640 - Wait - nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
             644 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             648 - Wait - dxgmms1.sys - C:\Windows\System32\drivers\dxgmms1.sys - Microsoft Corporation
             712 - Wait - msrpc.sys - C:\Windows\System32\Drivers\msrpc.sys - Microsoft Corporation
             936 - Wait - luafv.sys - C:\Windows\system32\drivers\luafv.sys - Microsoft Corporation
             1180 - Wait - csc.sys - C:\Windows\system32\drivers\csc.sys - Microsoft Corporation
             1184 - Wait - csc.sys - C:\Windows\system32\drivers\csc.sys - Microsoft Corporation
             1200 - Wait - rdbss.sys - C:\Windows\system32\DRIVERS\rdbss.sys - Microsoft Corporation
             1476 - Wait - HTTP.sys - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
             1480 - Wait - HTTP.sys - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
             1484 - Wait - HTTP.sys - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
             1580 - Wait - mpsdrv.sys - C:\Windows\System32\drivers\mpsdrv.sys - Microsoft Corporation
             2104 - Wait - rdbss.sys - C:\Windows\system32\DRIVERS\rdbss.sys - Microsoft Corporation
             2308 - Wait - HTTP.sys - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
             2452 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             2456 - Wait - klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
             2600 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2608 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2612 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2616 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2620 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2624 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2628 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2632 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2636 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2644 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2648 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2652 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2656 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2660 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2664 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2668 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2672 - Wait - srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
             2676 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2692 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2696 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2700 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2724 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2736 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2768 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2772 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             2776 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2780 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2784 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2788 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2792 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2796 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2800 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2804 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2860 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             2880 - Wait - srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
             3084 - Wait - rdbss.sys - C:\Windows\system32\DRIVERS\rdbss.sys - Microsoft Corporation
             3304 - Wait - spsys.sys - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
             4384 - Wait - kneps.sys - C:\Windows\system32\DRIVERS\kneps.sys - Kaspersky Lab
             4456 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
             4524 - Wait - ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[lsm.exe]Threads
             132 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             148 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             296 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             456 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             460 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             584 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             596 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             768 - Wait - lsm.exe - C:\Windows\system32\lsm.exe - Microsoft Corporation
             852 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4596 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4700 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             136 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             140 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             144 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             152 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             156 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1012 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1020 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2728 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2840 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             160 - Terminate - GPAPI.dll - C:\Windows\System32\GPAPI.dll - Microsoft Corporation
             484 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             732 - Wait - svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             760 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             812 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             816 - Terminate - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             888 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1092 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1120 - Wait - audiosrv.dll - c:\windows\system32\audiosrv.dll - Microsoft Corporation
             1136 - Wait - MMDevAPI.DLL - c:\windows\system32\MMDevAPI.DLL - Microsoft Corporation
             1152 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1160 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1304 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1312 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1356 - Wait - lmhsvc.dll - c:\windows\system32\lmhsvc.dll - Microsoft Corporation
             1360 - Wait - dhcpcore6.dll - C:\Windows\System32\dhcpcore6.dll - Microsoft Corporation
             1696 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1700 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             1704 - Wait - wevtsvc.dll - c:\windows\system32\wevtsvc.dll - Microsoft Corporation
             3308 - Wait - wscsvc.dll - c:\windows\system32\wscsvc.dll - Microsoft Corporation
             3460 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             3660 - Wait - wscsvc.dll - c:\windows\system32\wscsvc.dll - Microsoft Corporation
             4752 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4788 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             196 - Wait - ssdpsrv.dll - c:\windows\system32\ssdpsrv.dll - Microsoft Corporation
             252 - Wait - ssdpsrv.dll - c:\windows\system32\ssdpsrv.dll - Microsoft Corporation
             1076 - Wait - fntcache.dll - c:\windows\system32\fntcache.dll - Microsoft Corporation
             1236 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1720 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2112 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2932 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3908 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4368 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4424 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             4472 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4476 - Terminate - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             4480 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4516 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PCHunter64.exe]Threads
             248 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             868 - Wait - rasman.dll - C:\Windows\system32\rasman.dll - Microsoft Corporation
             1104 - Wait - mswsock.dll - C:\Windows\system32\mswsock.dll - Microsoft Corporation
             1752 - Wait - WININET.dll - C:\Windows\system32\WININET.dll - Microsoft Corporation
             1756 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1820 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             2304 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3372 - Run - PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - ????(??)????????
             4916 - Wait - PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - ????(??)????????
             4920 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5108 - Terminate - PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - ????(??)????????

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Threads
             396 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             424 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             472 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             476 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             580 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             592 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             600 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             724 - Wait - cdd.dll - C:\Windows\System32\cdd.dll - Microsoft Corporation
             728 - Wait - cdd.dll - C:\Windows\System32\cdd.dll - Microsoft Corporation
             924 - Wait - cdd.dll - C:\Windows\System32\cdd.dll - Microsoft Corporation
             928 - Wait - cdd.dll - C:\Windows\System32\cdd.dll - Microsoft Corporation
             1904 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             2964 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             4040 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[smss.exe]Threads
             416 - Wait - smss.exe - C:\Windows\System32\smss.exe - Microsoft Corporation
             564 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             568 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[winlogon.exe]Threads
             480 - Wait - winlogon.exe - C:\Windows\system32\winlogon.exe - Microsoft Corporation
             576 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1088 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1524 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvSCPAPISvr.exe]Threads
             440 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             968 - Wait - nvSCPAPISvr.exe - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - NVIDIA Corporation
             972 - Wait - nvSCPAPISvr.exe - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - NVIDIA Corporation
             976 - Wait - nvSCPAPISvr.exe - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - NVIDIA Corporation
             984 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             988 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             488 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             952 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1252 - Wait - mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation
             1284 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1560 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1824 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             1940 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2244 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2280 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             2748 - Wait - mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation
             2816 - Wait - mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation
             2824 - Wait - svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             2844 - Wait - mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation
             2876 - Wait - mprtp.dll - c:\program files\windows defender\mprtp.dll - Microsoft Corporation
             2904 - Terminate - mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation
             3596 - Terminate - mpsvc.dll - c:\program files\windows defender\mpsvc.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[explorer.exe]Threads
             560 - Wait - Explorer.EXE - C:\Windows\Explorer.EXE - Microsoft Corporation
             1268 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1724 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1952 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2100 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2240 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             2424 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             2756 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             2760 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             2764 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             2868 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             2884 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2980 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3216 - Wait - msiltcfg.dll - C:\Windows\system32\msiltcfg.dll - Microsoft Corporation
             3348 - Wait - WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             3436 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             3440 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3444 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3464 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3540 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             3544 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             3548 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             3552 - Wait - MMDevApi.dll - C:\Windows\System32\MMDevApi.dll - Microsoft Corporation
             3640 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             3744 - Wait - SHLWAPI.dll - C:\Windows\system32\SHLWAPI.dll - Microsoft Corporation
             3748 - Wait - Wlanapi.dll - C:\Windows\system32\Wlanapi.dll - Microsoft Corporation
             3752 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3828 - Wait - fxsst.dll - C:\Windows\system32\fxsst.dll - Microsoft Corporation
             3836 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3904 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             4520 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4624 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4628 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4632 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4868 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[csrss.exe]Threads
             652 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             656 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             660 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             664 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             692 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             716 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             720 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation
             752 - Wait - CSRSRV.dll - C:\Windows\system32\CSRSRV.dll - Microsoft Corporation
             776 - Wait - winsrv.DLL - C:\Windows\system32\winsrv.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[wininit.exe]Threads
             672 - Wait - wininit.exe - C:\Windows\system32\wininit.exe - Microsoft Corporation
             696 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             708 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             736 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             748 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             796 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             680 - Wait - es.dll - c:\windows\system32\es.dll - Microsoft Corporation
             1228 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1244 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1264 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             1276 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2820 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2892 - Wait - netprofm.dll - c:\windows\system32\netprofm.dll - Microsoft Corporation
             2896 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2928 - Wait - netprofm.dll - c:\windows\system32\netprofm.dll - Microsoft Corporation
             3324 - Wait - netprofm.dll - c:\windows\system32\netprofm.dll - Microsoft Corporation
             3332 - Wait - netprofm.dll - c:\windows\system32\netprofm.dll - Microsoft Corporation
             4608 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4876 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5088 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[avp.exe]Threads
             684 - Wait - avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO
             1004 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             1336 - Wait - DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             1772 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1972 - Wait - DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             2532 - Wait - DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             3076 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3080 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3120 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3624 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3648 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4136 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4300 - Terminate - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4376 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4812 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             5084 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             704 - Terminate - cryptsvc.dll - c:\windows\system32\cryptsvc.dll - Microsoft Corporation
             1320 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1324 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1332 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1376 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1380 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1384 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1388 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1392 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             1428 - Wait - ssdpapi.dll - C:\Windows\system32\ssdpapi.dll - Microsoft Corporation
             1608 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2224 - Wait - nlasvc.dll - c:\windows\system32\nlasvc.dll - Microsoft Corporation
             2228 - Wait - ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             2232 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2236 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3320 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             3700 - Wait - dnsrslvr.dll - c:\windows\system32\dnsrslvr.dll - Microsoft Corporation
             4880 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4972 - Wait - ESENT.dll - C:\Windows\system32\ESENT.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[services.exe]Threads
             744 - Terminate - services.exe - C:\Windows\system32\services.exe - Microsoft Corporation
             828 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             836 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             856 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             860 - Wait - UBPM.dll - C:\Windows\system32\UBPM.dll - Microsoft Corporation
             932 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1520 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2916 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3608 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5044 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[lsass.exe]Threads
             772 - Wait - lsass.exe - C:\Windows\system32\lsass.exe - Microsoft Corporation
             780 - Wait - lsasrv.dll - C:\Windows\system32\lsasrv.dll - Microsoft Corporation
             784 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             788 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             792 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             804 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             820 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             824 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1828 - Wait - SAMSRV.dll - C:\Windows\system32\SAMSRV.dll - Microsoft Corporation
             4740 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4756 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4764 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             992 - Wait - svchost.exe - C:\Windows\System32\svchost.exe - Microsoft Corporation
             1028 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1040 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1080 - Wait - audiosrv.dll - c:\windows\system32\audiosrv.dll - Microsoft Corporation
             1084 - Wait - MMDevAPI.DLL - c:\windows\system32\MMDevAPI.DLL - Microsoft Corporation
             1108 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1164 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1176 - Wait - cscsvc.dll - c:\windows\system32\cscsvc.dll - Microsoft Corporation
             1212 - Wait - cscsvc.dll - c:\windows\system32\cscsvc.dll - Microsoft Corporation
             1216 - Wait - cscsvc.dll - c:\windows\system32\cscsvc.dll - Microsoft Corporation
             1220 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1272 - Wait - PeerDist.dll - C:\Windows\System32\PeerDist.dll - Microsoft Corporation
             1292 - Wait - uxsms.dll - c:\windows\system32\uxsms.dll - Microsoft Corporation
             1352 - Terminate - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1408 - Wait - ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             1412 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             1416 - Wait - wlgpclnt.dll - c:\windows\system32\wlgpclnt.dll - Microsoft Corporation
             1832 - Terminate - cscsvc.dll - c:\windows\system32\cscsvc.dll - Microsoft Corporation
             2168 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2348 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2376 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2432 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2476 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             2912 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2920 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2924 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             2936 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             2976 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             2984 - Wait - hidserv.dll - c:\windows\system32\hidserv.dll - Microsoft Corporation
             3740 - Wait - AUTHZ.dll - C:\Windows\System32\AUTHZ.dll - Microsoft Corporation
             4032 - Wait - pcasvc.dll - c:\windows\system32\pcasvc.dll - Microsoft Corporation
             4460 - Wait - sysmain.dll - c:\windows\system32\sysmain.dll - Microsoft Corporation
             4512 - Terminate - sysmain.dll - c:\windows\system32\sysmain.dll - Microsoft Corporation
             5060 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[sppsvc.exe]Threads
             832 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2872 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3340 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3476 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             4584 - Wait - sppsvc.exe - C:\Windows\system32\sppsvc.exe - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchProtocolHost.exe]Threads
             848 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1528 - Wait - SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             1816 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             2148 - Wait - SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             2272 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2520 - Wait - SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             2584 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4312 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             876 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             884 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             892 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             896 - Terminate - GPAPI.dll - C:\Windows\system32\GPAPI.dll - Microsoft Corporation
             904 - Wait - umpnpmgr.dll - c:\windows\system32\umpnpmgr.dll - Microsoft Corporation
             908 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             912 - Wait - umpo.dll - c:\windows\system32\umpo.dll - Microsoft Corporation
             916 - Wait - umpo.dll - c:\windows\system32\umpo.dll - Microsoft Corporation
             920 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             996 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1364 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2212 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3088 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5092 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5116 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[daemonu.exe]Threads
             900 - Wait - daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
             2540 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2552 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             2944 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2992 - Terminate - daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
             3000 - Wait - daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
             3180 - Wait - daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
             3200 - Wait - daemonu.exe - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation
             4744 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvvsvc.exe]Threads
             944 - Wait - nvvsvc.exe - C:\Windows\system32\nvvsvc.exe - NVIDIA Corporation
             956 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             960 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1836 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4968 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             980 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1000 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1784 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             2068 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             2508 - Wait - ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             2548 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3096 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3100 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3104 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3108 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3112 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3116 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3136 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3140 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3144 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3148 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3152 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3336 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3468 - Wait - mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             3568 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3572 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3620 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3628 - Wait - ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             4024 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             4036 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             4044 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4048 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4052 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4060 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4064 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4068 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4072 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4076 - Wait - MMDevApi.dll - C:\Windows\Syswow64\MMDevApi.dll - Microsoft Corporation
             4084 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4088 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4092 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4120 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4784 - Wait - rasman.dll - C:\Windows\syswow64\rasman.dll - Microsoft Corporation
             4844 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1036 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1052 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1056 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1060 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1064 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1068 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1072 - Wait - mmcss.dll - c:\windows\system32\mmcss.dll - Microsoft Corporation
             1116 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1192 - Terminate - SSDPAPI.dll - C:\Windows\system32\SSDPAPI.dll - Microsoft Corporation
             1204 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1208 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1240 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             1280 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1344 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1404 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             1424 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1436 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1440 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1444 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1452 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1456 - Wait - schedsvc.dll - c:\windows\system32\schedsvc.dll - Microsoft Corporation
             1468 - Wait - taskcomp.dll - C:\Windows\system32\taskcomp.dll - Microsoft Corporation
             1488 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1492 - Wait - ESENT.dll - c:\windows\system32\ESENT.dll - Microsoft Corporation
             1672 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             1800 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1848 - Terminate - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1944 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1980 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2052 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2364 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2392 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2428 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2436 - Wait - ESENT.dll - c:\windows\system32\ESENT.dll - Microsoft Corporation
             2528 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2556 - Wait - aelupsvc.dll - c:\windows\system32\aelupsvc.dll - Microsoft Corporation
             2580 - Wait - ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             2588 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2596 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2604 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2688 - Terminate - NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             2712 - Terminate - NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             2864 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             2888 - Wait - upnp.dll - C:\Windows\system32\upnp.dll - Microsoft Corporation
             3128 - Wait - msvcrt.dll - C:\Windows\system32\msvcrt.dll - Microsoft Corporation
             3328 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3388 - Wait - ncprov.dll - C:\Windows\system32\wbem\ncprov.dll - Microsoft Corporation
             3392 - Wait - NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             3396 - Wait - NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             3532 - Wait - wbemcomn.dll - C:\Windows\system32\wbemcomn.dll - Microsoft Corporation
             3612 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             3864 - Wait - wuaueng.dll - c:\windows\system32\wuaueng.dll - Microsoft Corporation
             4164 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             4184 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             4344 - Wait - SSDPAPI.dll - C:\Windows\system32\SSDPAPI.dll - Microsoft Corporation
             5064 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskhost.exe]Threads
             1044 - Wait - MSCTF.dll - C:\Windows\system32\MSCTF.dll - Microsoft Corporation
             1288 - Wait - WINMM.dll - C:\Windows\system32\WINMM.dll - Microsoft Corporation
             1844 - Wait - taskhost.exe - C:\Windows\system32\taskhost.exe - Microsoft Corporation
             1852 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1856 - Wait - taskhost.exe - C:\Windows\system32\taskhost.exe - Microsoft Corporation
             1872 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1876 - Terminate - taskhost.exe - C:\Windows\system32\taskhost.exe - Microsoft Corporation
             1884 - Wait - MsCtfMonitor.dll - C:\Windows\system32\MsCtfMonitor.dll - Microsoft Corporation
             1976 - Terminate - taskhost.exe - C:\Windows\system32\taskhost.exe - Microsoft Corporation
             1984 - Wait - PlaySndSrv.dll - C:\Windows\System32\PlaySndSrv.dll - Microsoft Corporation
             4856 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             1100 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1156 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2856 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             3632 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3656 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3668 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3872 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4836 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             1112 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             1300 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             1340 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             1460 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1464 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             1896 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3508 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3764 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4100 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4104 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4108 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4112 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4116 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4144 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4148 - Wait - pepflashplayer.dll - C:\Users\JerryMX\AppData\Local\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll - 
             4816 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[audiodg.exe]Threads
             1128 - Wait - AUDIODG.EXE - C:\Windows\system32\AUDIODG.EXE - Microsoft Corporation
             1132 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1140 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2420 - Wait - ole32.dll - C:\Windows\System32\ole32.dll - Microsoft Corporation
             4604 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4872 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5000 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1172 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1188 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1232 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1504 - Terminate - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             1512 - Wait - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             1804 - Terminate - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             1860 - Wait - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation
             1888 - Terminate - gpsvc.dll - c:\windows\system32\gpsvc.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[postak.exe]Threads
             1256 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2408 - Wait - MSVCR100.dll - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\MSVCR100.dll - Microsoft Corporation
             3060 - Wait - postak.exe - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\postak.exe - 
             3172 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3176 - Wait - rasman.dll - C:\Windows\syswow64\rasman.dll - Microsoft Corporation
             3188 - Wait - ole32.dll - C:\Windows\syswow64\ole32.dll - Microsoft Corporation
             3592 - Wait - mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             3664 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4292 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4324 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4592 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4896 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[dwm.exe]Threads
             1296 - Wait - Dwm.exe - C:\Windows\system32\Dwm.exe - Microsoft Corporation
             1308 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1932 - Wait - Dwm.exe - C:\Windows\system32\Dwm.exe - Microsoft Corporation
             2292 - Wait - dwmcore.dll - C:\Windows\system32\dwmcore.dll - Microsoft Corporation
             2296 - Wait - uDWM.dll - C:\Windows\system32\uDWM.dll - Microsoft Corporation
             4936 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             1348 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2044 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             2372 - Wait - nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             3204 - Wait - nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             3516 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             3780 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3784 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3868 - Wait - nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             4056 - Wait - nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             4080 - Wait - nvd3dum.dll - C:\Windows\syswow64\nvd3dum.dll - NVIDIA Corporation
             4832 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1368 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1776 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1780 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2076 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             3192 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3196 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RaUI.exe]Threads
             2360 - Wait - RaUI.exe - C:\Program Files (x86)\EDIMAX\Common\RaUI.exe - Edimax Technology Co., Ltd.
             3212 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4888 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             5052 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[mdm.exe]Threads
             1648 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1936 - Wait - mdm.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe - Microsoft Corporation
             2056 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2060 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             2064 - Wait - mdm.exe - C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe - Microsoft Corporation
             2248 - Wait - csm.dll - c:\Program Files (x86)\Common Files\Microsoft Shared\VS7Debug\csm.dll - Microsoft Corporation
             4928 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Threads
             1420 - Wait - cimwin32.dll - C:\Windows\system32\wbem\cimwin32.dll - Microsoft Corporation
             1644 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1676 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2000 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2008 - Wait - wmiprvse.exe - C:\Windows\system32\wbem\wmiprvse.exe - Microsoft Corporation
             2940 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             3008 - Wait - wmiprvse.exe - C:\Windows\system32\wbem\wmiprvse.exe - Microsoft Corporation
             4140 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4616 - Wait - NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             1432 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1900 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             3588 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3636 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3644 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3652 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3876 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4840 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[spoolsv.exe]Threads
             1500 - Wait - spoolsv.exe - C:\Windows\System32\spoolsv.exe - Microsoft Corporation
             1536 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1540 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1544 - Wait - spoolsv.exe - C:\Windows\System32\spoolsv.exe - Microsoft Corporation
             2108 - Wait - usbmon.dll - C:\Windows\System32\usbmon.dll - Microsoft Corporation
             2116 - Wait - WSDMon.dll - C:\Windows\System32\WSDMon.dll - Microsoft Corporation
             2120 - Wait - FunDisc.dll - C:\Windows\system32\FunDisc.dll - Microsoft Corporation
             2124 - Wait - fdPnp.dll - C:\Windows\system32\fdPnp.dll - Microsoft Corporation
             2128 - Wait - FunDisc.dll - C:\Windows\system32\FunDisc.dll - Microsoft Corporation
             2136 - Wait - PrintIsolationProxy.dll - C:\Windows\System32\PrintIsolationProxy.dll - Microsoft Corporation
             2140 - Wait - localspl.dll - C:\Windows\System32\localspl.dll - Microsoft Corporation
             2156 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4940 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[avp.exe]Threads
             1516 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1568 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             1744 - Wait - avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO
             2080 - Wait - DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             2084 - Wait - DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             2088 - Wait - DumpWriter.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\DumpWriter.dll - Kaspersky Lab ZAO
             2284 - Wait - prremote.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.DLL - Kaspersky Lab ZAO
             2288 - Wait - prremote.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\prremote.DLL - Kaspersky Lab ZAO
             2440 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             2444 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             2448 - Wait - fssync.DLL - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\fssync.DLL - Kaspersky Lab ZAO
             2568 - Wait - wmihlpr.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\wmihlpr.ppl - Kaspersky Lab ZAO
             2572 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             2640 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3220 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3268 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3272 - Terminate - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3276 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3284 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3368 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3380 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3804 - Wait - timer.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\timer.ppl - Kaspersky Lab ZAO
             3812 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3824 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3956 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3964 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3968 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3972 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3976 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3980 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3984 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3988 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3992 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             3996 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4000 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4004 - Terminate - lic.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\lic.ppl - Kaspersky Lab ZAO
             4028 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4152 - Terminate - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4160 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4188 - Wait - avengine.dll.c7e81bee01af0a4599865c8685990873 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\avengine.dll.c7e81bee01af0a4599865c8685990873 - Kaspersky Lab ZAO
             4192 - Wait - avengine.dll.c7e81bee01af0a4599865c8685990873 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\avengine.dll.c7e81bee01af0a4599865c8685990873 - Kaspersky Lab ZAO
             4196 - Terminate - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4200 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4204 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4208 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4212 - Wait - netwatch.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\netwatch.ppl - Kaspersky Lab ZAO
             4216 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4220 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4224 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4228 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4232 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4236 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4240 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4244 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4252 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4256 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4268 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4272 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4280 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4284 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4296 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4320 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4328 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4340 - Wait - antispam.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\antispam.ppl - Kaspersky Lab ZAO
             4360 - Wait - hips.ppl - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\hips.ppl - Kaspersky Lab ZAO
             4364 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4388 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4392 - Wait - CKAHComm.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\CKAHComm.dll - Kaspersky Lab ZAO
             4396 - Wait - CKAHComm.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\CKAHComm.dll - Kaspersky Lab ZAO
             4400 - Wait - CKAHComm.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\CKAHComm.dll - Kaspersky Lab ZAO
             4404 - Wait - CKAHComm.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\CKAHComm.dll - Kaspersky Lab ZAO
             4408 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4412 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4416 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4420 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4428 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4444 - Wait - avengine.dll.c7e81bee01af0a4599865c8685990873 - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\avengine.dll.c7e81bee01af0a4599865c8685990873 - Kaspersky Lab ZAO
             4448 - Wait - klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - Kaspersky Lab ZAO
             4452 - Wait - klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - Kaspersky Lab ZAO
             4464 - Wait - mswsock.dll - C:\Windows\syswow64\mswsock.dll - Microsoft Corporation
             4492 - Wait - klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - Kaspersky Lab ZAO
             4500 - Wait - klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - C:\ProgramData\Kaspersky Lab\AVP13\Bases\Cache\klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a - Kaspersky Lab ZAO
             4548 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4552 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4780 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             4808 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             5004 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             5008 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             5012 - Wait - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation
             5036 - Terminate - MSVCR100.dll - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\MSVCR100.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             1552 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             1556 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1564 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1572 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1576 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1588 - Wait - AUTHZ.dll - c:\windows\system32\AUTHZ.dll - Microsoft Corporation
             1592 - Terminate - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1596 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1600 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1604 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1620 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1628 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1632 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1636 - Wait - mpssvc.dll - c:\windows\system32\mpssvc.dll - Microsoft Corporation
             1640 - Wait - dps.dll - c:\windows\system32\dps.dll - Microsoft Corporation
             1864 - Wait - radardt.dll - C:\Windows\system32\radardt.dll - Microsoft Corporation
             2908 - Wait - dps.dll - c:\windows\system32\dps.dll - Microsoft Corporation
             2988 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3124 - Wait - wdiasqmmodule.dll - C:\Windows\system32\wdiasqmmodule.dll - Microsoft Corporation
             4156 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4964 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[armsvc.exe]Threads
             1616 - Wait - armsvc.exe - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe - Adobe Systems Incorporated
             1728 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             1732 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             1736 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4952 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvxdsync.exe]Threads
             1656 - Wait - nvxdsync.exe - C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - NVIDIA Corporation
             1668 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1684 - Wait - nvxdsync.exe - C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - NVIDIA Corporation
             1908 - Wait - nvapi64.dll - C:\Windows\system32\nvapi64.dll - NVIDIA Corporation
             1912 - Wait - nvxdapix.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - NVIDIA Corporation
             1916 - Wait - nvxdsync.exe - C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe - NVIDIA Corporation
             1920 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3556 - Wait - nvxdapix.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - NVIDIA Corporation
             3692 - Wait - nvxdapix.dll - C:\Program Files\NVIDIA Corporation\Display\nvxdapix.dll - NVIDIA Corporation
             4956 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvvsvc.exe]Threads
             1664 - Wait - nvvsvc.exe - C:\Windows\system32\nvvsvc.exe - NVIDIA Corporation
             1708 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1764 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3564 - Wait - NVSVC64.DLL - C:\Windows\system32\NVSVC64.DLL - NVIDIA Corporation
             3576 - Wait - nvapi64.dll - C:\Windows\system32\nvapi64.dll - NVIDIA Corporation
             4960 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[HPSIsvc.exe]Threads
             1692 - Wait - HPSIsvc.exe - C:\Windows\system32\HPSIsvc.exe - HP
             1712 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1796 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             1812 - Wait - HPSIsvc.exe - C:\Windows\system32\HPSIsvc.exe - HP
             4932 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nusb3mon.exe]Threads
             1788 - Wait - nusb3mon.dll - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.dll - NEC Electronics Corporation
             2144 - Wait - nusb3mon.exe - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe - NEC Electronics Corporation
             2560 - Wait - nusb3mon.exe - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe - NEC Electronics Corporation
             2720 - Wait - nusb3mon.exe - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe - NEC Electronics Corporation
             4892 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskeng.exe]Threads
             1960 - Wait - taskeng.exe - C:\Windows\system32\taskeng.exe - Microsoft Corporation
             1964 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1968 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             1988 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4948 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[taskeng.exe]Threads
             2016 - Wait - taskeng.exe - C:\Windows\system32\taskeng.exe - Microsoft Corporation
             2020 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2024 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2032 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4944 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PnkBstrA.exe]Threads
             2096 - Wait - PnkBstrA.exe - C:\Windows\SysWOW64\PnkBstrA.exe - 
             2180 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2184 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             2188 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4924 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[szninstall.exe]Threads
             2160 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3044 - Wait - szninstall.exe - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\szninstall.exe - 
             4900 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[PsiService_2.exe]Threads
             2196 - Wait - PsiService_2.exe - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe - Protexis Inc.
             2208 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2216 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2220 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchProtocolHost.exe]Threads
             2204 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             3888 - Wait - SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             3892 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3896 - Wait - SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             3900 - Wait - SearchProtocolHost.exe - C:\Windows\system32\SearchProtocolHost.exe - Microsoft Corporation
             4504 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4848 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RalinkRegistryWriter.exe]Threads
             2256 - Wait - RalinkRegistryWriter.exe - C:\Program Files (x86)\EDIMAX\Common\RalinkRegistryWriter.exe - 
             2264 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2268 - Wait - sechost.dll - C:\Windows\SysWOW64\sechost.dll - Microsoft Corporation
             2276 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[svchost.exe]Threads
             2332 - Wait - svchost.exe - C:\Windows\system32\svchost.exe - Microsoft Corporation
             2344 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             2368 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2380 - Wait - wiaservc.dll - c:\windows\system32\wiaservc.dll - Microsoft Corporation
             2384 - Wait - wiaservc.dll - c:\windows\system32\wiaservc.dll - Microsoft Corporation
             3168 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             5068 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[GoogleCrashHandler.exe]Threads
             2464 - Wait - GoogleCrashHandler.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe - Google Inc.
             2480 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             2484 - Wait - GoogleCrashHandler.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe - Google Inc.
             2488 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3524 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4912 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[GoogleCrashHandler64.exe]Threads
             2472 - Wait - GoogleCrashHandler64.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe - Google Inc.
             2496 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             2500 - Wait - GoogleCrashHandler64.exe - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler64.exe - Google Inc.
             2504 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4544 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4908 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[nvtray.exe]Threads
             2524 - Wait - easyDaemonAPIU64.DLL - C:\Program Files\NVIDIA Corporation\Update Common\easyDaemonAPIU64.DLL - NVIDIA Corporation
             3688 - Wait - nvtray.exe - C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - NVIDIA Corporation
             3696 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3756 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3856 - Terminate - NvUpdt.dll - C:\Program Files\NVIDIA Corporation\Update Common\NvUpdt.dll - NVIDIA Corporation
             3960 - Wait - NvUI.dll - C:\Program Files\NVIDIA Corporation\Display\NvUI.dll - NVIDIA Corporation
             4484 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4864 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchFilterHost.exe]Threads
             2592 - Wait - SearchFilterHost.exe - C:\Windows\system32\SearchFilterHost.exe - Microsoft Corporation
             3004 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4264 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4308 - Wait - ole32.dll - C:\Windows\system32\ole32.dll - Microsoft Corporation
             4372 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             2680 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3496 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3500 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3504 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3560 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             3616 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3880 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4820 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[RAVCpl64.exe]Threads
             2972 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3012 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3016 - Wait - gdiplus.dll - C:\Windows\WinSxS\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17825_none_2b253c8271ec7765\gdiplus.dll - Microsoft Corporation
             3020 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3024 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3028 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3032 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3036 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3048 - Wait - RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor
             3052 - Wait - MMDevApi.dll - C:\Windows\System32\MMDevApi.dll - Microsoft Corporation
             3068 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4904 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             3488 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             3760 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3768 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3772 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3776 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3952 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             4828 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[jusched.exe]Threads
             3316 - Wait - jusched.exe - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Sun Microsystems, Inc.
             4884 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[SearchIndexer.exe]Threads
             3352 - Terminate - MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             3364 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3376 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3680 - Wait - SearchIndexer.exe - C:\Windows\system32\SearchIndexer.exe - Microsoft Corporation
             3708 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3712 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3716 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3720 - Wait - sechost.dll - C:\Windows\SYSTEM32\sechost.dll - Microsoft Corporation
             3736 - Terminate - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3820 - Wait - ESENT.dll - C:\Windows\system32\ESENT.dll - Microsoft Corporation
             3832 - Wait - TQUERY.DLL - C:\Windows\system32\TQUERY.DLL - Microsoft Corporation
             3840 - Wait - MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             3844 - Wait - MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             3848 - Wait - MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             3852 - Wait - MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             3936 - Terminate - MSSRCH.DLL - C:\Windows\system32\MSSRCH.DLL - Microsoft Corporation
             4016 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4612 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4760 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             4860 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[WmiPrvSE.exe]Threads
             3404 - Wait - wmiprvse.exe - C:\Windows\system32\wbem\wmiprvse.exe - Microsoft Corporation
             3408 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3412 - Wait - NCObjAPI.DLL - C:\Windows\system32\NCObjAPI.DLL - Microsoft Corporation
             3416 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation
             3428 - Wait - wmiprvse.exe - C:\Windows\system32\wbem\wmiprvse.exe - Microsoft Corporation
             3432 - Wait - ADVAPI32.dll - C:\Windows\system32\ADVAPI32.dll - Microsoft Corporation
             4976 - Wait - ntdll.dll - C:\Windows\SYSTEM32\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             3484 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             3492 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             3796 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             3800 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4824 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[chrome.exe]Threads
             4640 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             4648 - Wait - chrome.exe - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe - Google Inc.
             4656 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4668 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4676 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation
             4680 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4688 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4696 - Wait - chrome.dll - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll - Google Inc.
             4800 - Wait - ntdll.dll - C:\Windows\SysWOW64\ntdll.dll - Microsoft Corporation

------------------------------------------------------------------------------------------

      Image File Name[Idle]Threads

==========================================================================================

Kernel Module

       ntoskrnl.exe - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       hal.dll - C:\Windows\system32\hal.dll - Microsoft Corporation
       kdcom.dll - C:\Windows\system32\kdcom.dll - Microsoft Corporation
       mcupdate_GenuineIntel.dll - C:\Windows\system32\mcupdate_GenuineIntel.dll - Microsoft Corporation
       PSHED.dll - C:\Windows\system32\PSHED.dll - Microsoft Corporation
       CLFS.SYS - C:\Windows\system32\CLFS.SYS - Microsoft Corporation
       CI.dll - C:\Windows\system32\CI.dll - Microsoft Corporation
       Wdf01000.sys - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       WDFLDR.SYS - C:\Windows\system32\drivers\WDFLDR.SYS - Microsoft Corporation
       sptd.sys - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       ACPI.sys - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       WMILIB.SYS - C:\Windows\system32\drivers\WMILIB.SYS - Microsoft Corporation
       msisadrv.sys - C:\Windows\system32\drivers\msisadrv.sys - Microsoft Corporation
       vdrvroot.sys - C:\Windows\system32\drivers\vdrvroot.sys - Microsoft Corporation
       pci.sys - C:\Windows\system32\drivers\pci.sys - Microsoft Corporation
       kl1.sys - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       partmgr.sys - C:\Windows\System32\drivers\partmgr.sys - Microsoft Corporation
       volmgr.sys - C:\Windows\system32\drivers\volmgr.sys - Microsoft Corporation
       volmgrx.sys - C:\Windows\System32\drivers\volmgrx.sys - Microsoft Corporation
       pciide.sys - C:\Windows\system32\drivers\pciide.sys - Microsoft Corporation
       PCIIDEX.SYS - C:\Windows\system32\drivers\PCIIDEX.SYS - Microsoft Corporation
       mountmgr.sys - C:\Windows\System32\drivers\mountmgr.sys - Microsoft Corporation
       vmbus.sys - C:\Windows\system32\drivers\vmbus.sys - Microsoft Corporation
       winhv.sys - C:\Windows\system32\drivers\winhv.sys - Microsoft Corporation
       atapi.sys - C:\Windows\system32\drivers\atapi.sys - Microsoft Corporation
       ataport.SYS - C:\Windows\system32\drivers\ataport.SYS - Microsoft Corporation
       amdxata.sys - C:\Windows\system32\drivers\amdxata.sys - Advanced Micro Devices
       fltmgr.sys - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       fileinfo.sys - C:\Windows\system32\drivers\fileinfo.sys - Microsoft Corporation
       Ntfs.sys - C:\Windows\System32\Drivers\Ntfs.sys - Microsoft Corporation
       msrpc.sys - C:\Windows\System32\Drivers\msrpc.sys - Microsoft Corporation
       ksecdd.sys - C:\Windows\System32\Drivers\ksecdd.sys - Microsoft Corporation
       cng.sys - C:\Windows\System32\Drivers\cng.sys - Microsoft Corporation
       pcw.sys - C:\Windows\System32\drivers\pcw.sys - Microsoft Corporation
       Fs_Rec.sys - C:\Windows\System32\Drivers\Fs_Rec.sys - Microsoft Corporation
       ndis.sys - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       NETIO.SYS - C:\Windows\system32\drivers\NETIO.SYS - Microsoft Corporation
       ksecpkg.sys - C:\Windows\System32\Drivers\ksecpkg.sys - Microsoft Corporation
       tcpip.sys - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       fwpkclnt.sys - C:\Windows\System32\drivers\fwpkclnt.sys - Microsoft Corporation
       vmstorfl.sys - C:\Windows\system32\drivers\vmstorfl.sys - Microsoft Corporation
       volsnap.sys - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       spldr.sys - C:\Windows\System32\Drivers\spldr.sys - Microsoft Corporation
       rdyboost.sys - C:\Windows\System32\drivers\rdyboost.sys - Microsoft Corporation
       mup.sys - C:\Windows\System32\Drivers\mup.sys - Microsoft Corporation
       hwpolicy.sys - C:\Windows\System32\drivers\hwpolicy.sys - Microsoft Corporation
       fvevol.sys - C:\Windows\System32\DRIVERS\fvevol.sys - Microsoft Corporation
       disk.sys - C:\Windows\system32\DRIVERS\disk.sys - Microsoft Corporation
       CLASSPNP.SYS - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       cdrom.sys - C:\Windows\system32\DRIVERS\cdrom.sys - Microsoft Corporation
       klif.sys - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       klflt.sys - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
       Null.SYS - C:\Windows\System32\Drivers\Null.SYS - Microsoft Corporation
       Beep.SYS - C:\Windows\System32\Drivers\Beep.SYS - Microsoft Corporation
       vga.sys - C:\Windows\System32\drivers\vga.sys - Microsoft Corporation
       VIDEOPRT.SYS - C:\Windows\System32\drivers\VIDEOPRT.SYS - Microsoft Corporation
       watchdog.sys - C:\Windows\System32\drivers\watchdog.sys - Microsoft Corporation
       RDPCDD.sys - C:\Windows\System32\DRIVERS\RDPCDD.sys - Microsoft Corporation
       rdpencdd.sys - C:\Windows\system32\drivers\rdpencdd.sys - Microsoft Corporation
       rdprefmp.sys - C:\Windows\system32\drivers\rdprefmp.sys - Microsoft Corporation
       Msfs.SYS - C:\Windows\System32\Drivers\Msfs.SYS - Microsoft Corporation
       Npfs.SYS - C:\Windows\System32\Drivers\Npfs.SYS - Microsoft Corporation
       tdx.sys - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       TDI.SYS - C:\Windows\system32\DRIVERS\TDI.SYS - Microsoft Corporation
       kltdi.sys - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       afd.sys - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       netbt.sys - C:\Windows\System32\DRIVERS\netbt.sys - Microsoft Corporation
       wfplwf.sys - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       pacer.sys - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       klim6.sys - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       vwififlt.sys - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       netbios.sys - C:\Windows\system32\DRIVERS\netbios.sys - Microsoft Corporation
       wanarp.sys - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       termdd.sys - C:\Windows\system32\drivers\termdd.sys - Microsoft Corporation
       rdbss.sys - C:\Windows\system32\DRIVERS\rdbss.sys - Microsoft Corporation
       nsiproxy.sys - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       mssmbios.sys - C:\Windows\system32\drivers\mssmbios.sys - Microsoft Corporation
       kneps.sys - C:\Windows\system32\DRIVERS\kneps.sys - Kaspersky Lab
       discache.sys - C:\Windows\System32\drivers\discache.sys - Microsoft Corporation
       csc.sys - C:\Windows\system32\drivers\csc.sys - Microsoft Corporation
       dfsc.sys - C:\Windows\System32\Drivers\dfsc.sys - Microsoft Corporation
       blbdrive.sys - C:\Windows\system32\DRIVERS\blbdrive.sys - Microsoft Corporation
       AsUpIO.sys - C:\Windows\SysWow64\drivers\AsUpIO.sys - 
       AsIO.sys - C:\Windows\SysWow64\drivers\AsIO.sys - 
       tunnel.sys - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       intelppm.sys - C:\Windows\system32\DRIVERS\intelppm.sys - Microsoft Corporation
       nusb3xhc.sys - C:\Windows\system32\DRIVERS\nusb3xhc.sys - NEC Electronics Corporation
       USBD.SYS - C:\Windows\system32\DRIVERS\USBD.SYS - Microsoft Corporation
       nvlddmkm.sys - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       dxgkrnl.sys - C:\Windows\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       dxgmms1.sys - C:\Windows\System32\drivers\dxgmms1.sys - Microsoft Corporation
       HDAudBus.sys - C:\Windows\system32\drivers\HDAudBus.sys - Microsoft Corporation
       usbuhci.sys - C:\Windows\system32\DRIVERS\usbuhci.sys - Microsoft Corporation
       USBPORT.SYS - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       usbehci.sys - C:\Windows\system32\DRIVERS\usbehci.sys - Microsoft Corporation
       yk62x64.sys - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       1394ohci.sys - C:\Windows\system32\drivers\1394ohci.sys - Microsoft Corporation
       ASACPI.sys - C:\Windows\system32\DRIVERS\ASACPI.sys - 
       agnyzsuq.SYS - C:\Windows\System32\Drivers\agnyzsuq.SYS - Advanced Micro Devices
       SCSIPORT.SYS - C:\Windows\System32\Drivers\SCSIPORT.SYS - Microsoft Corporation
       wmiacpi.sys - C:\Windows\system32\drivers\wmiacpi.sys - Microsoft Corporation
       CompositeBus.sys - C:\Windows\system32\drivers\CompositeBus.sys - Microsoft Corporation
       AgileVpn.sys - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       rasl2tp.sys - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       ndistapi.sys - C:\Windows\system32\DRIVERS\ndistapi.sys - Microsoft Corporation
       ndiswan.sys - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       raspppoe.sys - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       raspptp.sys - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       rassstp.sys - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       rdpbus.sys - C:\Windows\system32\DRIVERS\rdpbus.sys - Microsoft Corporation
       kbdclass.sys - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       mouclass.sys - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       swenum.sys - C:\Windows\system32\drivers\swenum.sys - Microsoft Corporation
       ks.sys - C:\Windows\system32\drivers\ks.sys - Microsoft Corporation
       umbus.sys - C:\Windows\system32\drivers\umbus.sys - Microsoft Corporation
       nusb3hub.sys - C:\Windows\system32\DRIVERS\nusb3hub.sys - NEC Electronics Corporation
       usbhub.sys - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       NDProxy.SYS - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       nvhda64v.sys - C:\Windows\system32\drivers\nvhda64v.sys - NVIDIA Corporation
       portcls.sys - C:\Windows\system32\drivers\portcls.sys - Microsoft Corporation
       drmk.sys - C:\Windows\system32\drivers\drmk.sys - Microsoft Corporation
       ksthunk.sys - C:\Windows\system32\drivers\ksthunk.sys - Microsoft Corporation
       RTKVHD64.sys - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
       crashdmp.sys - C:\Windows\System32\Drivers\crashdmp.sys - Microsoft Corporation
       dump_dumpata.sys - C:\Windows\System32\Drivers\dump_dumpata.sys - File not found
       dump_atapi.sys - C:\Windows\System32\Drivers\dump_atapi.sys - File not found
       dump_dumpfve.sys - C:\Windows\System32\Drivers\dump_dumpfve.sys - File not found
       win32k.sys - C:\Windows\System32\win32k.sys - Microsoft Corporation
       Dxapi.sys - C:\Windows\System32\drivers\Dxapi.sys - Microsoft Corporation
       monitor.sys - C:\Windows\system32\DRIVERS\monitor.sys - Microsoft Corporation
       usbccgp.sys - C:\Windows\system32\DRIVERS\usbccgp.sys - Microsoft Corporation
       hidusb.sys - C:\Windows\system32\DRIVERS\hidusb.sys - Microsoft Corporation
       HIDCLASS.SYS - C:\Windows\system32\DRIVERS\HIDCLASS.SYS - Microsoft Corporation
       HIDPARSE.SYS - C:\Windows\system32\DRIVERS\HIDPARSE.SYS - Microsoft Corporation
       kbdhid.sys - C:\Windows\system32\drivers\kbdhid.sys - Microsoft Corporation
       klkbdflt.sys - C:\Windows\system32\DRIVERS\klkbdflt.sys - Kaspersky Lab
       mouhid.sys - C:\Windows\system32\DRIVERS\mouhid.sys - Microsoft Corporation
       klmouflt.sys - C:\Windows\system32\DRIVERS\klmouflt.sys - Kaspersky Lab
       TSDDD.dll - C:\Windows\System32\TSDDD.dll - Microsoft Corporation
       cdd.dll - C:\Windows\System32\cdd.dll - Microsoft Corporation
       luafv.sys - C:\Windows\system32\drivers\luafv.sys - Microsoft Corporation
       lltdio.sys - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       nwifi.sys - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       ndisuio.sys - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       rspndr.sys - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       HTTP.sys - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
       bowser.sys - C:\Windows\system32\DRIVERS\bowser.sys - Microsoft Corporation
       mpsdrv.sys - C:\Windows\System32\drivers\mpsdrv.sys - Microsoft Corporation
       mrxsmb.sys - C:\Windows\system32\DRIVERS\mrxsmb.sys - Microsoft Corporation
       mrxsmb10.sys - C:\Windows\system32\DRIVERS\mrxsmb10.sys - Microsoft Corporation
       mrxsmb20.sys - C:\Windows\system32\DRIVERS\mrxsmb20.sys - Microsoft Corporation
       peauth.sys - C:\Windows\system32\drivers\peauth.sys - Microsoft Corporation
       secdrv.SYS - C:\Windows\System32\Drivers\secdrv.SYS - Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.
       srvnet.sys - C:\Windows\System32\DRIVERS\srvnet.sys - Microsoft Corporation
       tcpipreg.sys - C:\Windows\System32\drivers\tcpipreg.sys - Microsoft Corporation
       srv2.sys - C:\Windows\System32\DRIVERS\srv2.sys - Microsoft Corporation
       srv.sys - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       spsys.sys - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
       PCHunter64.sys - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.sys - File not found
       Suspicious DriverObject - Suspicious DriverObject - 

==========================================================================================

Notify Routine

       CreateProcess - 0xFFFFF8000329B540 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CreateProcess - 0xFFFFF880011329CC - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       CreateProcess - 0xFFFFF880013C6930 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       CreateProcess - 0xFFFFF88001D041E0 - C:\Windows\System32\Drivers\ksecdd.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF88001D19780 - C:\Windows\System32\Drivers\cng.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF8800207C230 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       CreateProcess - 0xFFFFF88000CDABA0 - C:\Windows\system32\CI.dll - Microsoft Corporation
       CreateProcess - 0xFFFFF88004529C28 - C:\Windows\system32\DRIVERS\klflt.sys - Kaspersky Lab
       CreateProcess - 0xFFFFF88005F29FD4 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       CreateProcess - 0xFFFFF88005618D2C - C:\Windows\system32\drivers\peauth.sys - Microsoft Corporation
       CreateThread - 0xFFFFF880013C6BC0 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       CreateThread - 0xFFFFF8800449551C - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       CreateThread - 0xFFFFF88005F59380 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       LoadImage - 0xFFFFF800035F1880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       LoadImage - 0xFFFFF880010B698C - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       LoadImage - 0xFFFFF880013C6AC0 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       LoadImage - 0xFFFFF880045105E4 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       CmpCallback - 0xFFFFF880044A4774 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       BugCheckCallback - 0xFFFFF88001EE3730 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       BugCheckCallback - 0xFFFFF88001EE3730 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       BugCheckCallback - 0xFFFFF88001EE3730 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       BugCheckCallback - 0xFFFFF88001EE3730 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       BugCheckCallback - 0xFFFFF88001EE3730 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       BugCheckCallback - 0xFFFFF880010AB1EC - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       BugCheckCallback - 0xFFFFF8000322502C - C:\Windows\system32\hal.dll - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8800140EAC0 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       BugCheckReasonCallback - 0xFFFFF880012E5B80 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88007565F40 - C:\Windows\system32\DRIVERS\mouhid.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8800754CEC4 - C:\Windows\system32\drivers\kbdhid.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88007532D84 - C:\Windows\system32\DRIVERS\HIDCLASS.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF8800751DD70 - C:\Windows\system32\DRIVERS\hidusb.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880074AD204 - C:\Windows\System32\Drivers\crashdmp.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880056E2738 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880056E26DC - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880050CB51C - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88005204828 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880052ADC70 - C:\Windows\system32\drivers\1394ohci.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880050592D8 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880050593B4 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88005059348 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88005F29938 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       BugCheckReasonCallback - 0xFFFFF8800690CF3C - C:\Windows\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88004C7311C - C:\Windows\system32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88004C730D4 - C:\Windows\system32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88004C73034 - C:\Windows\system32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88004C72FF0 - C:\Windows\system32\drivers\mssmbios.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88004565620 - C:\Windows\System32\drivers\VIDEOPRT.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000FC3CF4 - C:\Windows\system32\DRIVERS\cdrom.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88001A0FD70 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880013C5580 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000F476A0 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF880010AB20C - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       BugCheckReasonCallback - 0xFFFFF88000F47750 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       BugCheckReasonCallback - 0xFFFFF88000E720DC - C:\Windows\system32\drivers\ataport.SYS - Microsoft Corporation
       SeFileSystem - 0xFFFFF8800338BA9C - C:\Windows\system32\DRIVERS\mrxsmb.sys - Microsoft Corporation
       SeFileSystem - 0xFFFFF88007592B94 - C:\Windows\system32\drivers\luafv.sys - Microsoft Corporation
       SeFileSystem - 0xFFFFF88004505428 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       Shutdown - 0xFFFFF8800125AD20 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       Shutdown - 0xFFFFF88004579B04 - C:\Windows\System32\drivers\VIDEOPRT.SYS - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF880056E2540 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       Shutdown - 0xFFFFF8800511A7F0 - C:\Windows\system32\drivers\csc.sys - Microsoft Corporation
       Shutdown - 0xFFFFF88004579B04 - C:\Windows\System32\drivers\VIDEOPRT.SYS - Microsoft Corporation
       Shutdown - 0xFFFFF88004579B04 - C:\Windows\System32\drivers\VIDEOPRT.SYS - Microsoft Corporation
       Shutdown - 0xFFFFF88004579B04 - C:\Windows\System32\drivers\VIDEOPRT.SYS - Microsoft Corporation
       Shutdown - 0xFFFFF88004508E58 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       Shutdown - 0xFFFFF880010A8730 - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       Shutdown - 0xFFFFF88001D04010 - C:\Windows\System32\Drivers\ksecdd.sys - Microsoft Corporation
       Shutdown - 0xFFFFF88001215248 - C:\Windows\System32\drivers\mountmgr.sys - Microsoft Corporation
       Shutdown - 0xFFFFF800036CDB70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Shutdown - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Shutdown - 0xFFFFF8800125AD20 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       Shutdown - 0xFFFFF880019CEC40 - C:\Windows\system32\drivers\volmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF88006287650 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       PlugPlay - 0xFFFFF80003744270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF80003744270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF96000235D2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF880053538A4 - C:\Windows\system32\drivers\CompositeBus.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF88006058504 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       PlugPlay - 0xFFFFF80003744270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF80003744270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF880053538A4 - C:\Windows\system32\drivers\CompositeBus.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF88001138D34 - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       PlugPlay - 0xFFFFF880019D5330 - C:\Windows\system32\drivers\volmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF8800451485C - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       PlugPlay - 0xFFFFF880069E7E10 - C:\Windows\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF96000235D2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF8800142E990 - C:\Windows\system32\DRIVERS\kl1.sys - Kaspersky Lab ZAO
       PlugPlay - 0xFFFFF88001138D34 - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       PlugPlay - 0xFFFFF96000235BE4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF880060D5478 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       PlugPlay - 0xFFFFF88000E6A6E0 - C:\Windows\system32\drivers\winhv.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF88004DB8184 - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF88001138D34 - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       PlugPlay - 0xFFFFF880019D5330 - C:\Windows\system32\drivers\volmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF8800120F180 - C:\Windows\System32\drivers\mountmgr.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF88001138D34 - C:\Windows\System32\Drivers\sptd.sys - Duplex Secure Ltd.
       PlugPlay - 0xFFFFF8800451485C - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       PlugPlay - 0xFFFFF88001DBF370 - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF96000235D2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       PlugPlay - 0xFFFFF80003744270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PlugPlay - 0xFFFFF880019C3710 - C:\Windows\System32\drivers\partmgr.sys - Microsoft Corporation
       FsNotifyChange - 0xFFFFF88000DBC7F0 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       PriorityCallback - 0xFFFFF88001A068B0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF80003712AB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033D5AF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033EEAF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033DD7A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033DD7A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033DD7A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033DD7A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033DD7A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF800033DD7A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PowerSettingCallback - 0xFFFFF88008A28F58 - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
       IopTimer - 0xFFFFF88001A01010 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF88001A01010 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800504E250 - C:\Windows\system32\DRIVERS\USBPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF8800575D010 - C:\Windows\system32\drivers\portcls.sys - Microsoft Corporation
       IopTimer - 0xFFFFF8800575D010 - C:\Windows\system32\drivers\portcls.sys - Microsoft Corporation
       IopTimer - 0xFFFFF8800575D010 - C:\Windows\system32\drivers\portcls.sys - Microsoft Corporation
       IopTimer - 0xFFFFF8800575D010 - C:\Windows\system32\drivers\portcls.sys - Microsoft Corporation
       IopTimer - 0xFFFFF8800575D010 - C:\Windows\system32\drivers\portcls.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF880056D5024 - C:\Windows\system32\DRIVERS\usbhub.sys - Microsoft Corporation
       IopTimer - 0xFFFFF88005319B20 - C:\Windows\System32\Drivers\SCSIPORT.SYS - Microsoft Corporation
       IopTimer - 0xFFFFF88003343FB0 - C:\Windows\system32\DRIVERS\bowser.sys - Microsoft Corporation

==========================================================================================

Filter

       File - \FileSystem\FltMgr->\FileSystem\Ntfs - 0xFFFFFA8006507950 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       Disk - \Driver\partmgr->\Driver\Disk - 0xFFFFFA80065A22C0 - C:\Windows\System32\drivers\partmgr.sys - Microsoft Corporation
       Volume - \Driver\fvevol->\Driver\volmgr - 0xFFFFFA80064B1940 - C:\Windows\System32\DRIVERS\fvevol.sys - Microsoft Corporation
       Volume - \Driver\rdyboost->\Driver\fvevol - 0xFFFFFA80064B2C40 - C:\Windows\System32\drivers\rdyboost.sys - Microsoft Corporation
       Volume - \Driver\volsnap->\Driver\rdyboost - 0xFFFFFA800665E040 - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       Nsiproxy - \Driver\kltdi->\Driver\nsiproxy - 0xFFFFFA800748B040 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA8007104780 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA8007104AD0 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA8007104E20 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA8007127370 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA80071276C0 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA8007127040 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\tdx - 0xFFFFFA8007125040 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       Tdx - \Driver\kltdi->\Driver\kltdi - 0xFFFFFA8007125730 - C:\Windows\system32\DRIVERS\kltdi.sys - Kaspersky Lab
       PnpManager - \Driver\volmgr->\Driver\PnpManager - 0xFFFFFA80062E99E0 - C:\Windows\system32\drivers\volmgr.sys - Microsoft Corporation
       PnpManager - \Driver\vdrvroot->\Driver\PnpManager - 0xFFFFFA80062B5310 - C:\Windows\system32\drivers\vdrvroot.sys - Microsoft Corporation
       PnpManager - \Driver\umbus->\Driver\PnpManager - 0xFFFFFA80073B7710 - C:\Windows\system32\drivers\umbus.sys - Microsoft Corporation
       PnpManager - \Driver\swenum->\Driver\PnpManager - 0xFFFFFA80073B98C0 - C:\Windows\system32\drivers\swenum.sys - Microsoft Corporation
       PnpManager - \Driver\TermDD->\Driver\PnpManager - 0xFFFFFA80073B6240 - C:\Windows\system32\drivers\termdd.sys - Microsoft Corporation
       PnpManager - \Driver\mouclass->\Driver\TermDD - 0xFFFFFA80073B4CF0 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       PnpManager - \Driver\TermDD->\Driver\PnpManager - 0xFFFFFA80073A6DA0 - C:\Windows\system32\drivers\termdd.sys - Microsoft Corporation
       PnpManager - \Driver\kbdclass->\Driver\TermDD - 0xFFFFFA80073B0630 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       PnpManager - \Driver\rdpbus->\Driver\PnpManager - 0xFFFFFA80073B0B00 - C:\Windows\system32\DRIVERS\rdpbus.sys - Microsoft Corporation
       PnpManager - \Driver\RasSstp->\Driver\PnpManager - 0xFFFFFA80073AE050 - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       PnpManager - \Driver\PptpMiniport->\Driver\PnpManager - 0xFFFFFA80073A9050 - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       PnpManager - \Driver\RasPppoe->\Driver\PnpManager - 0xFFFFFA80073A5050 - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       PnpManager - \Driver\NdisWan->\Driver\PnpManager - 0xFFFFFA800739F050 - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       PnpManager - \Driver\NdisWan->\Driver\PnpManager - 0xFFFFFA800739D050 - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       PnpManager - \Driver\NdisWan->\Driver\PnpManager - 0xFFFFFA8007395050 - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       PnpManager - \Driver\Rasl2tp->\Driver\PnpManager - 0xFFFFFA8007392050 - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       PnpManager - \Driver\RasAgileVpn->\Driver\PnpManager - 0xFFFFFA800738A050 - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       PnpManager - \Driver\mssmbios->\Driver\PnpManager - 0xFFFFFA80073583E0 - C:\Windows\system32\drivers\mssmbios.sys - Microsoft Corporation
       PnpManager - \Driver\CompositeBus->\Driver\PnpManager - 0xFFFFFA8007358AD0 - C:\Windows\system32\drivers\CompositeBus.sys - Microsoft Corporation
       PnpManager - \Driver\blbdrive->\Driver\PnpManager - 0xFFFFFA8007150060 - C:\Windows\system32\DRIVERS\blbdrive.sys - Microsoft Corporation
       PnpManager - \Driver\ACPI_HAL->\Driver\PnpManager - 0xFFFFFA8005545040 -  - 
       PnpManager - \Driver\tunnel->\Driver\PnpManager - 0xFFFFFA8007170050 - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       PnpManager - \Driver\tunnel->\Driver\PnpManager - 0xFFFFFA800716E050 - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       PnpManager - \Driver\tunnel->\Driver\PnpManager - 0xFFFFFA8007138050 - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation

==========================================================================================

DPC Timer

       0xFFFFFA8007540070 - 0xFFFFF88001F46B60 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80074ACA30 - 0xFFFFF88001EBF090 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007138278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007170278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF8800218A960 - 0xFFFFF88002088430 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073A5278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A9278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007CA7A38 - 0xFFFFF88000EBE330 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       0xFFFFF800034D67C0 - 0xFFFFF800032DF53C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80074F3978 - 0xFFFFF88000EBE330 - C:\Windows\system32\drivers\Wdf01000.sys - Microsoft Corporation
       0xFFFFFA80064ED860 - 0xFFFFF88006025D94 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       0xFFFFF8800217D670 - 0xFFFFF88001E012B0 - C:\Windows\system32\drivers\NETIO.SYS - Microsoft Corporation
       0xFFFFF880021878F0 - 0xFFFFF88001E012B0 - C:\Windows\system32\drivers\NETIO.SYS - Microsoft Corporation
       0xFFFFF8800217C5B0 - 0xFFFFF88001E012B0 - C:\Windows\system32\drivers\NETIO.SYS - Microsoft Corporation
       0xFFFFF8800217B4F0 - 0xFFFFF88001E012B0 - C:\Windows\system32\drivers\NETIO.SYS - Microsoft Corporation
       0xFFFFFA800552FDB0 - 0xFFFFF88001E012B0 - C:\Windows\system32\drivers\NETIO.SYS - Microsoft Corporation
       0xFFFFF800034D86E0 - 0xFFFFF80003316E28 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF88001D755B0 - 0xFFFFF88001D126B0 - C:\Windows\System32\Drivers\cng.sys - Microsoft Corporation
       0xFFFFF80003478840 - 0xFFFFF800032C5DE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF88004C30960 - 0xFFFFF88004C155A4 - C:\Windows\system32\DRIVERS\rdbss.sys - Microsoft Corporation
       0xFFFFFA8005809680 - 0xFFFFF88004D028C0 - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFFA80087104B8 - 0xFFFFF88008A0C1C8 - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
       0xFFFFFA8006F1B580 - 0xFFFFF88000CC5F78 - C:\Windows\system32\CI.dll - Microsoft Corporation
       0xFFFFF80003477900 - 0xFFFFF8000338F0E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80083B5D80 - 0xFFFFF800033D71F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800863A380 - 0xFFFFF800033D71F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800890E250 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFFA80083B5C10 - 0xFFFFF800033D71F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80083AE330 - 0xFFFFF800033D71F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800636D300 - 0xFFFFF88000D84CF0 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       0xFFFFF88000DA0480 - 0xFFFFF88000D84790 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       0xFFFFFA8009452DD8 - 0xFFFFF88008A0C1C8 - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
       0xFFFFF88001C26220 - 0xFFFFF88001C0C8B0 - C:\Windows\System32\drivers\rdyboost.sys - Microsoft Corporation
       0xFFFFF88001D75500 - 0xFFFFF88001D3BB10 - C:\Windows\System32\Drivers\cng.sys - Microsoft Corporation
       0xFFFFF88001A9C198 - 0xFFFFF88001A426D0 - C:\Windows\System32\Drivers\Ntfs.sys - Microsoft Corporation
       0xFFFFFA800711BF78 - 0xFFFFF88004CB0E30 - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFFA800755F2D0 - 0xFFFFF88004D39010 - C:\Windows\System32\DRIVERS\netbt.sys - Microsoft Corporation
       0xFFFFF80003481F20 - 0xFFFFF80003288F70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF800034D6550 - 0xFFFFF80003280030 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF800034517D8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF880032B8680 - 0xFFFFF88003285540 - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
       0xFFFFF880032B7580 - 0xFFFFF88003285680 - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
       0xFFFFF880032C09C0 - 0xFFFFF88003285700 - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
       0xFFFFF880032C1260 - 0xFFFFF88003285CB0 - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
       0xFFFFFA800649F990 - 0xFFFFF88001DBEE50 - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFFA800571C438 - 0xFFFFF88008A0C1C8 - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
       0xFFFFF80003477860 - 0xFFFFF8000338EF60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA8008AA6E30 - 0xFFFFF88004D028C0 - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFF88008B47F50 - 0xFFFFF88008B2B150 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFFA80083B5EF0 - 0xFFFFF800033D71F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF8000345F050 - 0xFFFFF80003278F94 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800552B6D0 - 0xFFFFF80003278FAC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFF80003480040 - 0xFFFFF8000325D0B4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800739F278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007395278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007392278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF800034D7300 - 0xFFFFF80003279BD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA8008857930 - 0xFFFFF88003345610 - C:\Windows\system32\DRIVERS\bowser.sys - Microsoft Corporation
       0xFFFFFA8008802378 - 0xFFFFF88003230370 - C:\Windows\System32\DRIVERS\srvnet.sys - Microsoft Corporation
       0xFFFFF880032C0BA0 - 0xFFFFF8800327A2B0 - C:\Windows\system32\drivers\HTTP.sys - Microsoft Corporation
       0xFFFFFA80064B7C10 - 0xFFFFF88001DA28C0 - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFFA80076E73E8 - 0xFFFFF88008A0C1C8 - C:\Windows\system32\drivers\spsys.sys - Microsoft Corporation
       0xFFFFF88007582710 - 0xFFFFF8800757C82C - C:\Windows\system32\drivers\luafv.sys - Microsoft Corporation
       0xFFFFF80003477720 - 0xFFFFF80003268DD8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA8007E46BC8 - 0xFFFFF88007506AC0 - C:\Windows\system32\DRIVERS\usbccgp.sys - Microsoft Corporation
       0xFFFFF88005168480 - 0xFFFFF88005164C3C - C:\Windows\System32\Drivers\dfsc.sys - Microsoft Corporation
       0xFFFFFA80090E5580 - 0xFFFFF800033D71F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800809FD88 - 0xFFFFF88007506AC0 - C:\Windows\system32\DRIVERS\usbccgp.sys - Microsoft Corporation
       0xFFFFF800034777C0 - 0xFFFFF8000338EF30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80064C9820 - 0xFFFFF88001DA28C0 - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFFA80064AAA10 - 0xFFFFF88001DA28C0 - C:\Windows\system32\drivers\volsnap.sys - Microsoft Corporation
       0xFFFFF80003473F70 - 0xFFFFF800033C7F50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA8005895740 - 0xFFFFF88004D028C0 - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFFA80075516D0 - 0xFFFFF88004D39010 - C:\Windows\System32\DRIVERS\netbt.sys - Microsoft Corporation
       0xFFFFF88003BE7C38 - 0xFFFFF800032D714C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80082A0330 - 0xFFFFF88004D028C0 - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFFA8006343460 - 0xFFFFFA80054B0250 - unknown image - 
       0xFFFFFA8006346460 - 0xFFFFFA80054B0250 - unknown image - 
       0xFFFFFA8006349460 - 0xFFFFFA80054B0250 - unknown image - 
       0xFFFFFA800634D460 - 0xFFFFFA80054B0250 - unknown image - 
       0xFFFFFA8006354460 - 0xFFFFFA80054B0250 - unknown image - 
       0xFFFFFA800635E460 - 0xFFFFFA80054B0250 - unknown image - 
       0xFFFFFA8007317278 - 0xFFFFF88001F45160 - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFF88004CCC760 - 0xFFFFF88004CB0010 - C:\Windows\system32\drivers\afd.sys - Microsoft Corporation
       0xFFFFF880051B6CB8 - 0xFFFFF8800519F750 - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA8007842948 - 0xFFFFF88007357410 - C:\Windows\system32\drivers\RTKVHD64.sys - Realtek Semiconductor Corp.
       0xFFFFFA80071998E8 - 0xFFFFF88006910A1C - C:\Windows\System32\drivers\dxgkrnl.sys - Microsoft Corporation
       0xFFFFFA80065680E0 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFF800034D7620 - 0xFFFFF800032B63B4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80071AE330 - 0xFFFFF88005F2B4D0 - C:\Windows\system32\DRIVERS\nvlddmkm.sys - NVIDIA Corporation
       0xFFFFF88001A9C0E8 - 0xFFFFF88001A5AF40 - C:\Windows\System32\Drivers\Ntfs.sys - Microsoft Corporation
       0xFFFFFA8006568248 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800890E570 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF880009EFAD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80065683B0 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800890E890 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF88003768AD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800890EBB0 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF880037D9AD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA8006568518 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006568680 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800890EED0 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF880009B6AD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA80065687E8 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800890F1F0 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF8800388CAD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA800890F510 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF880038FDAD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       0xFFFFFA8006568950 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006568AB8 - 0xFFFFF88002084FE0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800890F830 - 0xFFFFF88008B2B010 - C:\Windows\System32\DRIVERS\srv.sys - Microsoft Corporation
       0xFFFFF8800396EAD8 - 0xFFFFF8000328ABA4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Worker Thread

       CriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DelayedWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DelayedWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DelayedWorkQueue - unknown image - 
       DelayedWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DelayedWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       HyperCriticalWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DelayedWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DelayedWorkQueue - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

HalDispatchTable

       0 - 0xFFFFF8000324B8E8 - HaliQuerySystemInformation - C:\Windows\system32\hal.dll
       1 - 0xFFFFF8000324C470 - HalpSetSystemInformation - C:\Windows\system32\hal.dll
       2 - 0xFFFFF8000363C090 - xHalQueryBusSlots - C:\Windows\system32\ntoskrnl.exe
       3 - 0x0000000000000000 - - - 
       4 - 0xFFFFF80003319ABC - HalExamineMBR - C:\Windows\system32\ntoskrnl.exe
       5 - 0xFFFFF800035F3FC0 - IoReadPartitionTable - C:\Windows\system32\ntoskrnl.exe
       6 - 0xFFFFF800035F46FC - IoSetPartitionInformation - C:\Windows\system32\ntoskrnl.exe
       7 - 0xFFFFF80003736D00 - IoWritePartitionTable - C:\Windows\system32\ntoskrnl.exe
       8 - 0xFFFFF800032FD990 - xHalHandlerForBus - C:\Windows\system32\ntoskrnl.exe
       9 - 0xFFFFF800032C1E70 - xHalReferenceHandler - C:\Windows\system32\ntoskrnl.exe
       10 - 0xFFFFF800032C1E70 - xHalReferenceHandler - C:\Windows\system32\ntoskrnl.exe
       11 - 0xFFFFF8000324ACA4 - HaliInitPnpDriver - C:\Windows\system32\hal.dll
       12 - 0xFFFFF8000324BE88 - xHalWheaInitProcessorGenericSection - C:\Windows\system32\hal.dll
       13 - 0xFFFFF80003220534 - HaliGetDmaAdapter - C:\Windows\system32\hal.dll
       14 - 0xFFFFF8000324AC18 - HalacpiGetInterruptTranslator - C:\Windows\system32\hal.dll
       15 - 0xFFFFF8000363C090 - xHalStartMirroring - C:\Windows\system32\ntoskrnl.exe
       16 - 0xFFFFF80003363600 - PoCancelDeviceNotify - C:\Windows\system32\ntoskrnl.exe
       17 - 0xFFFFF80003363600 - xHalMirrorPhysicalMemory - C:\Windows\system32\ntoskrnl.exe
       18 - 0xFFFFF8000324C114 - UnknowName - C:\Windows\system32\hal.dll
       19 - 0xFFFFF80003363600 - xHalMirrorPhysicalMemory - C:\Windows\system32\ntoskrnl.exe
       20 - 0xFFFFF80003219BA8 - UnknowName - C:\Windows\system32\hal.dll

==========================================================================================

HalPrivateDispatchTable

       0 - 0xFFFFF800032FD990 - xHalHandlerForBus - C:\Windows\system32\ntoskrnl.exe
       1 - 0xFFFFF800032FD990 - xHalHandlerForBus - C:\Windows\system32\ntoskrnl.exe
       2 - 0xFFFFF8000324B850 - HaliLocateHiberRanges - C:\Windows\system32\hal.dll
       3 - 0xFFFFF8000363C090 - xHalRegisterBusHandler - C:\Windows\system32\ntoskrnl.exe
       4 - 0xFFFFF80003244C24 - HaliSetWakeEnable - C:\Windows\system32\hal.dll
       5 - 0xFFFFF80003244A78 - HaliSetWakeAlarm - C:\Windows\system32\hal.dll
       6 - 0xFFFFF88000F8DB94 - xHalTranslateBusAddress - C:\Windows\system32\drivers\pci.sys
       7 - 0xFFFFF88000FA8368 - xHalTranslateBusAddress - C:\Windows\system32\drivers\pci.sys
       8 - 0xFFFFF8000321BE74 - HaliHaltSystem - C:\Windows\system32\hal.dll
       9 - 0xFFFFF80003227408 - HalpFindBusAddressTranslation - C:\Windows\system32\hal.dll
       10 - 0xFFFFF80003223280 - HalpBiosDisplayReset - C:\Windows\system32\hal.dll
       11 - 0xFFFFF80003249A04 - HalpAllocateMapRegisters - C:\Windows\system32\hal.dll
       12 - 0xFFFFF8000324D008 - xKdSetupPciDeviceForDebugging - C:\Windows\system32\hal.dll
       13 - 0xFFFFF8000324D428 - xKdReleasePciDeviceForDebugging - C:\Windows\system32\hal.dll
       14 - 0xFFFFF80003219C60 - xKdGetAcpiTablePhase0 - C:\Windows\system32\hal.dll
       15 - 0xFFFFF8000321BEEC - KdCheckPowerButton - C:\Windows\system32\hal.dll
       16 - 0xFFFFF80003363620 - xHalVectorToIDTEntry - C:\Windows\system32\ntoskrnl.exe
       17 - 0xFFFFF8000321E144 - KdMapPhysicalMemory64/MatchAll - C:\Windows\system32\hal.dll
       18 - 0xFFFFF8000321E384 - xKdUnmapVirtualAddress - C:\Windows\system32\hal.dll
       19 - 0xFFFFF8000321EBC4 - KdGetPciDataByOffset - C:\Windows\system32\hal.dll
       20 - 0xFFFFF8000321EC58 - KdSetPciDataByOffset - C:\Windows\system32\hal.dll
       21 - 0xFFFFF88001045F08 - xHalGetInterruptVector - C:\Windows\system32\drivers\ACPI.sys
       22 - 0xFFFFF880010291A4 - xHalGetVectorInput - C:\Windows\system32\drivers\ACPI.sys
       23 - 0xFFFFF8000324A49C - HalpLoadMicrocode - C:\Windows\system32\hal.dll
       24 - 0xFFFFF8000324A574 - HalpUnloadMicrocode - C:\Windows\system32\hal.dll
       25 - 0xFFFFF8000321E0C8 - HalpMcUpdatePostUpdate - C:\Windows\system32\hal.dll
       26 - 0xFFFFF88001044ED4 - xHalAllocateMessageTarget - C:\Windows\system32\drivers\ACPI.sys
       27 - 0xFFFFF88001045178 - xKdUnmapVirtualAddress - C:\Windows\system32\drivers\ACPI.sys
       28 - 0xFFFFF8000324C620 - HalpDpReplaceBegin - C:\Windows\system32\hal.dll
       29 - 0xFFFFF800032478B8 - HalpDpReplaceTarget - C:\Windows\system32\hal.dll
       30 - 0xFFFFF800032479C0 - HalpDpReplaceControl - C:\Windows\system32\hal.dll
       31 - 0xFFFFF8000324CA08 - HalpDpReplaceEnd - C:\Windows\system32\hal.dll
       32 - 0xFFFFF80003229724 - HalpPrepareForBugcheck - C:\Windows\system32\hal.dll
       33 - 0xFFFFF800032221D8 - HalpReadWheaPhysicalMemory - C:\Windows\system32\hal.dll
       34 - 0xFFFFF800032C1E70 - HalpWriteWheaPhysicalMemory - C:\Windows\system32\ntoskrnl.exe
       35 - 0xFFFFF8000322915C - HalpTscSynchronization - C:\Windows\system32\hal.dll
       36 - 0xFFFFF80003222304 - HalpWheaInitProcessorGenericSection - C:\Windows\system32\hal.dll
       37 - 0xFFFFF8000321B03C - HalStopLegacyUsbInterrupts - C:\Windows\system32\hal.dll
       38 - 0xFFFFF80003223084 - HalpReadWheaPhysicalMemory - C:\Windows\system32\hal.dll
       39 - 0xFFFFF800032230A4 - HalpWriteWheaPhysicalMemory - C:\Windows\system32\hal.dll
       40 - 0xFFFFF80003248158 - HalpDpMaskLevelTriggeredInterrupts - C:\Windows\system32\hal.dll
       41 - 0xFFFFF800032481C8 - HalpDpUnmaskLevelTriggeredInterrupts - C:\Windows\system32\hal.dll
       42 - 0xFFFFF800032481E0 - HalpDpGetInterruptReplayState - C:\Windows\system32\hal.dll
       43 - 0xFFFFF80003248284 - HalpDpReplayInterrupts - C:\Windows\system32\hal.dll
       44 - 0xFFFFF80003363610 - xHalQueryIoPortAccessSupported - C:\Windows\system32\ntoskrnl.exe

==========================================================================================

HalAcpiDispatchTable

       HalAcpiTimerCarry - 0xFFFFF800032235D0 - - - 0xFFFFF800032235D0 - C:\Windows\system32\hal.dll
       HaliAcpiMachineStateInit - 0xFFFFF8000324BBF8 - - - 0xFFFFF8000324BBF8 - C:\Windows\system32\hal.dll
       HaliAcpiQueryFlags - 0xFFFFF8000324BE7C - - - 0xFFFFF8000324BE7C - C:\Windows\system32\hal.dll
       HalpAcpiPicStateIntact - 0xFFFFF80003246FC8 - - - 0xFFFFF80003246FC8 - C:\Windows\system32\hal.dll
       HalpRestoreInterruptControllerState - 0xFFFFF80003246DD8 - - - 0xFFFFF80003246DD8 - C:\Windows\system32\hal.dll
       HaliPciInterfaceReadConfig - 0xFFFFF8000321E7DC - - - 0xFFFFF8000321E7DC - C:\Windows\system32\hal.dll
       HaliPciInterfaceWriteConfig - 0xFFFFF8000321E87C - - - 0xFFFFF8000321E87C - C:\Windows\system32\hal.dll
       HalpGetApicVersion - 0xFFFFF80003224FB0 - - - 0xFFFFF80003224FB0 - C:\Windows\system32\hal.dll
       HaliSetMaxLegacyPciBusNumber - 0xFFFFF8000321E7C4 - - - 0xFFFFF8000321E7C4 - C:\Windows\system32\hal.dll
       HaliIsVectorValid - 0xFFFFF8000324CA50 - - - 0xFFFFF8000324CA50 - C:\Windows\system32\hal.dll
       HalAcpiGetTableDispatch - 0xFFFFF80003219BA8 - - - 0xFFFFF80003219BA8 - C:\Windows\system32\hal.dll
       HalAcpiGetRsdpDispatch - 0xFFFFF80003219C04 - - - 0xFFFFF80003219C04 - C:\Windows\system32\hal.dll
       HalAcpiGetFacsMappingDispatch - 0xFFFFF80003219C14 - - - 0xFFFFF80003219C14 - C:\Windows\system32\hal.dll
       HalAcpiGetAllTablesDispatch - 0xFFFFF80003219C24 - - - 0xFFFFF80003219C24 - C:\Windows\system32\hal.dll

==========================================================================================

System Debug

       KiDebugRoutine OK - 0xFFFFF8000339C170 - 0xFFFFF8000339C170 - C:\Windows\system32\ntoskrnl.exe

==========================================================================================

Object Hijack

       0xFFFFFA8007D21050 - DeviceObject - 166105258 - Abnormal DeviceObject/DriverObject

==========================================================================================

Direct IO

       Nothing

==========================================================================================

GDT

       Selector(0x0002) - Type(Code RE Ac)
       Selector(0x0003) - Type(Data RW Ac)
       Selector(0x0004) - Type(Code RE Ac)
       Selector(0x0005) - Type(Data RW Ac)
       Selector(0x0006) - Type(Code RE Ac)
       Selector(0x0008) - Type(T5532 Busy)
       Selector(0x000A) - Type(Data RW Ac)
       Selector(0x000C) - Type(Code RE)

==========================================================================================

SSDT

       NtMapUserPhysicalPagesScatter - OK - 0xFFFFF800036E6880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForSingleObject - OK - 0xFFFFF800035CA5B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCallbackReturn - OK - 0xFFFFF800032C8780 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadFile - OK - 0xFFFFF800035BD710 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeviceIoControlFile - OK - 0xFFFFF800035F0360 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteFile - OK - 0xFFFFF800035E7020 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRemoveIoCompletion - OK - 0xFFFFF80003590340 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseSemaphore - OK - 0xFFFFF80003589F8C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyWaitReceivePort - OK - 0xFFFFF800035E8804 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyPort - OK - 0xFFFFF800036B6620 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationThread - OK - 0xFFFFF8000359C6A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetEvent - OK - 0xFFFFF800035BCCA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtClose - OK - 0xFFFFF800035CB810 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryObject - OK - 0xFFFFF800035B4C50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationFile - OK - 0xFFFFF800035B1A60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKey - OK - 0xFFFFF800035AD8D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateValueKey - OK - 0xFFFFF800035B3E60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFindAtom - OK - 0xFFFFF800035C6820 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDefaultLocale - OK - 0xFFFFF800035822F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryKey - OK - 0xFFFFF800035A3270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryValueKey - OK - 0xFFFFF800035A4460 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateVirtualMemory - OK - 0xFFFFF800035CB990 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationProcess - OK - 0xFFFFF800035E5A90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForMultipleObjects32 - OK - 0xFFFFF800035F6D10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteFileGather - OK - 0xFFFFF8000372EB40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationProcess - OK - 0xFFFFF800035C2254 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateKey - OK - 0xFFFFF80003587EF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreeVirtualMemory - OK - 0xFFFFF800032BCE10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtImpersonateClientOfPort - OK - 0xFFFFF80003715190 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseMutant - OK - 0xFFFFF800035CA0F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationToken - OK - 0xFFFFF800035994F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRequestWaitReplyPort - OK - 0xFFFFF800035E8200 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryVirtualMemory - OK - 0xFFFFF800035AD8F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenThreadToken - OK - 0xFFFFF800035A72E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationThread - OK - 0xFFFFF800035C16EC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenProcess - OK - 0xFFFFF800035A628C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationFile - OK - 0xFFFFF800035B23B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapViewOfSection - OK - 0xFFFFF800035EE5A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckAndAuditAlarm - OK - 0xFFFFF800035B7D30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnmapViewOfSection - OK - 0xFFFFF800035EC690 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyWaitReceivePortEx - OK - 0xFFFFF800035E8820 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTerminateProcess - OK - 0xFFFFF8000358D400 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetEventBoostPriority - OK - 0xFFFFF800036EB560 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadFileScatter - OK - 0xFFFFF8000353C88C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenThreadTokenEx - OK - 0xFFFFF800035A6D30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenProcessTokenEx - OK - 0xFFFFF800035AEC10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryPerformanceCounter - OK - 0xFFFFF80003584EC8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateKey - OK - 0xFFFFF8000358C4D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenFile - OK - 0xFFFFF800035BCD6C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDelayExecution - OK - 0xFFFFF800035CA6C4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDirectoryFile - OK - 0xFFFFF800035BD440 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemInformation - OK - 0xFFFFF800035DEFF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSection - OK - 0xFFFFF800035EE940 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryTimer - OK - 0xFFFFF800036EB100 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFsControlFile - OK - 0xFFFFF800035AD83C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteVirtualMemory - OK - 0xFFFFF8000357AED8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCloseObjectAuditAlarm - OK - 0xFFFFF800035A9C08 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDuplicateObject - OK - 0xFFFFF800035ACBE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryAttributesFile - OK - 0xFFFFF800035AEDF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtClearEvent - OK - 0xFFFFF800035BE220 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadVirtualMemory - OK - 0xFFFFF8000357B050 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenEvent - OK - 0xFFFFF800035B5568 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAdjustPrivilegesToken - OK - 0xFFFFF800035890B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDuplicateToken - OK - 0xFFFFF8000357A178 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtContinue - OK - 0xFFFFF800032D2740 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDefaultUILanguage - OK - 0xFFFFF80003683060 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueueApcThread - OK - 0xFFFFF800035B8B8C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtYieldExecution - OK - 0xFFFFF8000329EF98 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddAtom - OK - 0xFFFFF800035293CC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateEvent - OK - 0xFFFFF80003598D90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryVolumeInformationFile - OK - 0xFFFFF800035E9800 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateSection - OK - 0xFFFFF800035AE98C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushBuffersFile - OK - 0xFFFFF80003572D80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtApphelpCacheControl - OK - 0xFFFFF800035B4140 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProcessEx - OK - 0xFFFFF80003748B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateThread - OK - 0xFFFFF800036B6750 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtIsProcessInJob - OK - 0xFFFFF800036EBBB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtProtectVirtualMemory - OK - 0xFFFFF800035ED6E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySection - OK - 0xFFFFF800035F1970 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtResumeThread - OK - 0xFFFFF800035C4E80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTerminateThread - OK - 0xFFFFF800035A94F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadRequestData - OK - 0xFFFFF8000373C370 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateFile - OK - 0xFFFFF800035DCAEC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryEvent - OK - 0xFFFFF8000356D8E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWriteRequestData - OK - 0xFFFFF8000373C2F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenDirectoryObject - OK - 0xFFFFF800035EF4C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeAndAuditAlarm - OK - 0xFFFFF80003575224 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemTime - OK - 0xFFFFF8000365FB00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForMultipleObjects - OK - 0xFFFFF800035CAC48 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationObject - OK - 0xFFFFF8000356FFD8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelIoFile - OK - 0xFFFFF800036EA9F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTraceEvent - OK - 0xFFFFF800032B55C4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPowerInformation - OK - 0xFFFFF800035904EC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetValueKey - OK - 0xFFFFF80003587F2C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelTimer - OK - 0xFFFFF8000328562C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimer - OK - 0xFFFFF800032BC9D4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAcceptConnectPort - OK - 0xFFFFF8000358E140 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheck - OK - 0xFFFFF800032924A4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByType - OK - 0xFFFFF800032AAE74 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeResultList - OK - 0xFFFFF800033EFC80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeResultListAndAuditAlarm - OK - 0xFFFFF800036FD180 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAccessCheckByTypeResultListAndAuditAlarmByHandle - OK - 0xFFFFF800036FD0C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddBootEntry - OK - 0xFFFFF80003719C40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAddDriverEntry - OK - 0xFFFFF800037199A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAdjustGroupsToken - OK - 0xFFFFF8000355474C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlertResumeThread - OK - 0xFFFFF800036FECA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlertThread - OK - 0xFFFFF800035BB9EC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateLocallyUniqueId - OK - 0xFFFFF8000356B388 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateReserveObject - OK - 0xFFFFF800036B5C00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateUserPhysicalPages - OK - 0xFFFFF8000372D090 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAllocateUuids - OK - 0xFFFFF80003526B20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcAcceptConnectPort - OK - 0xFFFFF800035B0E18 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCancelMessage - OK - 0xFFFFF8000353C32C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcConnectPort - OK - 0xFFFFF800035B5E3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreatePort - OK - 0xFFFFF800035BC0BC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreatePortSection - OK - 0xFFFFF80003570E20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreateResourceReserve - OK - 0xFFFFF800035BC50C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreateSectionView - OK - 0xFFFFF80003570080 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcCreateSecurityContext - OK - 0xFFFFF80003574BA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeletePortSection - OK - 0xFFFFF80003568150 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeleteResourceReserve - OK - 0xFFFFF800036A6EB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeleteSectionView - OK - 0xFFFFF8000358D664 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDeleteSecurityContext - OK - 0xFFFFF80003574D6C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcDisconnectPort - OK - 0xFFFFF8000358D0E8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcImpersonateClientOfPort - OK - 0xFFFFF800035A6B00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcOpenSenderProcess - OK - 0xFFFFF800035B6B80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcOpenSenderThread - OK - 0xFFFFF8000358FC50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcQueryInformation - OK - 0xFFFFF8000356561C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcQueryInformationMessage - OK - 0xFFFFF800035A6660 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcRevokeSecurityContext - OK - 0xFFFFF800036A6D30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcSendWaitReceivePort - OK - 0xFFFFF800035E1D40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAlpcSetInformation - OK - 0xFFFFF800035BB130 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAreMappedFilesTheSame - OK - 0xFFFFF80003526840 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtAssignProcessToJobObject - OK - 0xFFFFF8000358BB38 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelIoFileEx - OK - 0xFFFFF800035F5D40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCancelSynchronousIoFile - OK - 0xFFFFF800036FFA90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCommitComplete - OK - 0xFFFFF80003701090 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCommitEnlistment - OK - 0xFFFFF80003727C10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCommitTransaction - OK - 0xFFFFF800035626FC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompactKeys - OK - 0xFFFFF80003704B10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompareTokens - OK - 0xFFFFF80003598660 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompleteConnectPort - OK - 0xFFFFF8000355EEC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCompressKey - OK - 0xFFFFF80003755E40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtConnectPort - OK - 0xFFFFF800035820E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateDebugObject - OK - 0xFFFFF800036B5980 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateDirectoryObject - OK - 0xFFFFF8000356ADC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateEnlistment - OK - 0xFFFFF8000355B1F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateEventPair - OK - 0xFFFFF800036B5B00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateIoCompletion - OK - 0xFFFFF800035B6590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateJobObject - OK - 0xFFFFF800036B6280 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateJobSet - OK - 0xFFFFF800036FAF70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateKeyTransacted - OK - 0xFFFFF8000355DD8C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateKeyedEvent - OK - 0xFFFFF80003587014 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateMailslotFile - OK - 0xFFFFF80003548880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateMutant - OK - 0xFFFFF8000357A4B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateNamedPipeFile - OK - 0xFFFFF80003594898 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreatePagingFile - OK - 0xFFFFF8000373FE10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreatePort - OK - 0xFFFFF8000358FBF8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreatePrivateNamespace - OK - 0xFFFFF800035460E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProcess - OK - 0xFFFFF80003748C00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProfile - OK - 0xFFFFF800036FCF80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateProfileEx - OK - 0xFFFFF800036FD050 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateResourceManager - OK - 0xFFFFF8000355F0BC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateSemaphore - OK - 0xFFFFF8000357A9D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateSymbolicLinkObject - OK - 0xFFFFF8000356B404 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateThreadEx - OK - 0xFFFFF800035C3DEC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTimer - OK - 0xFFFFF80003568648 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateToken - OK - 0xFFFFF8000356A360 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTransaction - OK - 0xFFFFF8000355843C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateTransactionManager - OK - 0xFFFFF8000355E4AC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateUserProcess - OK - 0xFFFFF8000357F400 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateWaitablePort - OK - 0xFFFFF800036F6980 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtCreateWorkerFactory - OK - 0xFFFFF800035B6698 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDebugActiveProcess - OK - 0xFFFFF80003725E00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDebugContinue - OK - 0xFFFFF800036FD7B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteAtom - OK - 0xFFFFF8000370FB10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteBootEntry - OK - 0xFFFFF800036C8BA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteDriverEntry - OK - 0xFFFFF800036C8680 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteFile - OK - 0xFFFFF80003530880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteKey - OK - 0xFFFFF80003555644 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteObjectAuditAlarm - OK - 0xFFFFF800036FC2F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeletePrivateNamespace - OK - 0xFFFFF800035F29F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDeleteValueKey - OK - 0xFFFFF80003553F7C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDisableLastKnownGood - OK - 0xFFFFF800036A6AA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDisplayString - OK - 0xFFFFF8000372F4A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtDrawText - OK - 0xFFFFF800033F7110 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnableLastKnownGood - OK - 0xFFFFF800036F3390 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateBootEntries - OK - 0xFFFFF80003734FD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateDriverEntries - OK - 0xFFFFF800037345B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateSystemEnvironmentValuesEx - OK - 0xFFFFF80003735590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtEnumerateTransactionObject - OK - 0xFFFFF800036FAA20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtExtendSection - OK - 0xFFFFF80003707890 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFilterToken - OK - 0xFFFFF800035F60D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushInstallUILanguage - OK - 0xFFFFF8000370B2C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushInstructionCache - OK - 0xFFFFF80003545CEC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushKey - OK - 0xFFFFF80003573D2C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushProcessWriteBuffers - OK - 0xFFFFF800032764B4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushVirtualMemory - OK - 0xFFFFF80003539564 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFlushWriteBuffer - OK - 0xFFFFF800036449F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreeUserPhysicalPages - OK - 0xFFFFF80003701780 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreezeRegistry - OK - 0xFFFFF800033D1B20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtFreezeTransactions - OK - 0xFFFFF800036FEBB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetContextThread - OK - 0xFFFFF80003527554 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetCurrentProcessorNumber - OK - 0xFFFFF8000356468C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetDevicePowerState - OK - 0xFFFFF800036F99D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetMUIRegistryInfo - OK - 0xFFFFF80003586E28 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNextProcess - OK - 0xFFFFF80003707EC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNextThread - OK - 0xFFFFF80003707BD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNlsSectionPtr - OK - 0xFFFFF80003706B10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetNotificationResourceManager - OK - 0xFFFFF800036FEA30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetPlugPlayEvent - OK - 0xFFFFF8000353F4E4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtGetWriteWatch - OK - 0xFFFFF800032764C4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtImpersonateAnonymousToken - OK - 0xFFFFF80003568828 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtImpersonateThread - OK - 0xFFFFF8000357AD64 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtInitializeNlsFiles - OK - 0xFFFFF8000357B8B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtInitializeRegistry - OK - 0xFFFFF8000352F840 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtInitiatePowerAction - OK - 0xFFFFF80003720D50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtIsSystemResumeAutomatic - OK - 0xFFFFF800036431C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtIsUILanguageComitted - OK - 0xFFFFF800035943F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtListenPort - OK - 0xFFFFF80003704ED0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadDriver - OK - 0xFFFFF80003751140 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadKey - OK - 0xFFFFF800035529F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadKey2 - OK - 0xFFFFF800037565F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLoadKeyEx - OK - 0xFFFFF80003551A10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockFile - OK - 0xFFFFF80003548FE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockProductActivationKeys - OK - 0xFFFFF800036EC6B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockRegistryKey - OK - 0xFFFFF80003704200 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtLockVirtualMemory - OK - 0xFFFFF800033EC030 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtMakePermanentObject - OK - 0xFFFFF8000370D4E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtMakeTemporaryObject - OK - 0xFFFFF8000356D190 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapCMFModule - OK - 0xFFFFF8000357CCB4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtMapUserPhysicalPages - OK - 0xFFFFF800036E7090 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtModifyBootEntry - OK - 0xFFFFF80003719C10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtModifyDriverEntry - OK - 0xFFFFF80003719970 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeDirectoryFile - OK - 0xFFFFF8000353A3EC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeKey - OK - 0xFFFFF80003589EB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeMultipleKeys - OK - 0xFFFFF800035895E4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtNotifyChangeSession - OK - 0xFFFFF800036FF6D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenEnlistment - OK - 0xFFFFF800036F7AB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenEventPair - OK - 0xFFFFF800036BD990 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenIoCompletion - OK - 0xFFFFF800036BD610 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenJobObject - OK - 0xFFFFF800036BDB00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyEx - OK - 0xFFFFF800035A4C20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyTransacted - OK - 0xFFFFF800036FB4C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyTransactedEx - OK - 0xFFFFF8000355E1B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenKeyedEvent - OK - 0xFFFFF800036BD8E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenMutant - OK - 0xFFFFF800035EE9C4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenObjectAuditAlarm - OK - 0xFFFFF800036FC400 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenPrivateNamespace - OK - 0xFFFFF8000356C4A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenProcessToken - OK - 0xFFFFF8000357A5E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenResourceManager - OK - 0xFFFFF800035F5658 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSemaphore - OK - 0xFFFFF8000353C138 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSession - OK - 0xFFFFF800036BD580 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenSymbolicLinkObject - OK - 0xFFFFF8000357A6E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenThread - OK - 0xFFFFF800035C63FC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenTimer - OK - 0xFFFFF800036BDA50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenTransaction - OK - 0xFFFFF800036F7810 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtOpenTransactionManager - OK - 0xFFFFF800036FA700 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPlugPlayControl - OK - 0xFFFFF80003597A74 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrePrepareComplete - OK - 0xFFFFF800037011F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrePrepareEnlistment - OK - 0xFFFFF80003727CC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrepareComplete - OK - 0xFFFFF800037012A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrepareEnlistment - OK - 0xFFFFF80003727D70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrivilegeCheck - OK - 0xFFFFF8000356D694 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrivilegeObjectAuditAlarm - OK - 0xFFFFF800036FCBF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPrivilegedServiceAuditAlarm - OK - 0xFFFFF8000353E924 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPropagationComplete - OK - 0xFFFFF8000372E1F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPropagationFailed - OK - 0xFFFFF800036FF220 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtPulseEvent - OK - 0xFFFFF800035393C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryBootEntryOrder - OK - 0xFFFFF80003734D30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryBootOptions - OK - 0xFFFFF800036C8880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDebugFilterState - OK - 0xFFFFF8000330AF10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDirectoryObject - OK - 0xFFFFF800035EEF10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryDriverEntryOrder - OK - 0xFFFFF80003734A90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryEaFile - OK - 0xFFFFF8000373D0E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryFullAttributesFile - OK - 0xFFFFF80003566570 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationAtom - OK - 0xFFFFF800036CA5E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationEnlistment - OK - 0xFFFFF800036F5D70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationJobObject - OK - 0xFFFFF80003717320 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationPort - OK - 0xFFFFF800036A69D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationResourceManager - OK - 0xFFFFF800036F5440 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationTransaction - OK - 0xFFFFF800036F56B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationTransactionManager - OK - 0xFFFFF800035F51C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInformationWorkerFactory - OK - 0xFFFFF800033EE370 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryInstallUILanguage - OK - 0xFFFFF80003592890 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryIntervalProfile - OK - 0xFFFFF80003654BD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryIoCompletion - OK - 0xFFFFF800036EACF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryLicenseValue - OK - 0xFFFFF800035B8BC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryMultipleValueKey - OK - 0xFFFFF80003588AC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryMutant - OK - 0xFFFFF800036EB270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryOpenSubKeys - OK - 0xFFFFF80003722AE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryOpenSubKeysEx - OK - 0xFFFFF800037226F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryPortInformationProcess - OK - 0xFFFFF80003642F60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryQuotaInformationFile - OK - 0xFFFFF8000373C3F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySecurityAttributesToken - OK - 0xFFFFF80003597878 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySecurityObject - OK - 0xFFFFF80003568950 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySemaphore - OK - 0xFFFFF800036EB420 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySymbolicLinkObject - OK - 0xFFFFF8000357F1A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemEnvironmentValue - OK - 0xFFFFF80003719FE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemEnvironmentValueEx - OK - 0xFFFFF8000373E5F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQuerySystemInformationEx - OK - 0xFFFFF800035B64F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueryTimerResolution - OK - 0xFFFFF8000353A9F4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtQueueApcThreadEx - OK - 0xFFFFF800035B8A50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRaiseException - OK - 0xFFFFF800032D2980 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRaiseHardError - OK - 0xFFFFF80003706EC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReadOnlyEnlistment - OK - 0xFFFFF80003701140 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRecoverEnlistment - OK - 0xFFFFF80003726C60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRecoverResourceManager - OK - 0xFFFFF8000355BCA8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRecoverTransactionManager - OK - 0xFFFFF8000355B888 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRegisterProtocolAddressInformation - OK - 0xFFFFF8000372E300 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRegisterThreadTerminatePort - OK - 0xFFFFF800036EBCA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseKeyedEvent - OK - 0xFFFFF800035BB4C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReleaseWorkerFactoryWorker - OK - 0xFFFFF800032BC3CC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRemoveIoCompletionEx - OK - 0xFFFFF800035729A8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRemoveProcessDebug - OK - 0xFFFFF800036EAF90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRenameKey - OK - 0xFFFFF80003729050 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRenameTransactionManager - OK - 0xFFFFF80003717150 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplaceKey - OK - 0xFFFFF80003755700 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplacePartitionUnit - OK - 0xFFFFF800033FCCF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtReplyWaitReplyPort - OK - 0xFFFFF800036C68D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRequestPort - OK - 0xFFFFF800035C65A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtResetEvent - OK - 0xFFFFF800036EB5E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtResetWriteWatch - OK - 0xFFFFF8000327605C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRestoreKey - OK - 0xFFFFF800037559E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtResumeProcess - OK - 0xFFFFF80003724170 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollbackComplete - OK - 0xFFFFF800036FF2C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollbackEnlistment - OK - 0xFFFFF8000371FFB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollbackTransaction - OK - 0xFFFFF80003726300 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtRollforwardTransactionManager - OK - 0xFFFFF80003727E20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSaveKey - OK - 0xFFFFF80003753950 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSaveKeyEx - OK - 0xFFFFF800037536A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSaveMergedKeys - OK - 0xFFFFF800037534D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSecureConnectPort - OK - 0xFFFFF80003580560 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSerializeBoot - OK - 0xFFFFF800036AA7F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetBootEntryOrder - OK - 0xFFFFF800037199D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetBootOptions - OK - 0xFFFFF800036CAC40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetContextThread - OK - 0xFFFFF80003527220 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDebugFilterState - OK - 0xFFFFF800036A6BA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDefaultHardErrorPort - OK - 0xFFFFF800036AAD30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDefaultLocale - OK - 0xFFFFF800036830E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDefaultUILanguage - OK - 0xFFFFF800036847C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetDriverEntryOrder - OK - 0xFFFFF80003719730 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetEaFile - OK - 0xFFFFF8000373CC60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetHighEventPair - OK - 0xFFFFF800036FE5C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetHighWaitLowEventPair - OK - 0xFFFFF800036FED70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationDebugObject - OK - 0xFFFFF800036FB2F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationEnlistment - OK - 0xFFFFF800036FACC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationJobObject - OK - 0xFFFFF80003722E00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationKey - OK - 0xFFFFF80003575B48 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationResourceManager - OK - 0xFFFFF8000372DED0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationToken - OK - 0xFFFFF80003568DB8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationTransaction - OK - 0xFFFFF8000372F670 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationTransactionManager - OK - 0xFFFFF800037170B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetInformationWorkerFactory - OK - 0xFFFFF800032BF740 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIntervalProfile - OK - 0xFFFFF80003680700 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIoCompletion - OK - 0xFFFFF800035664A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetIoCompletionEx - OK - 0xFFFFF800036EABB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetLdtEntries - OK - 0xFFFFF8000335EE60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetLowEventPair - OK - 0xFFFFF800036FE630 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetLowWaitHighEventPair - OK - 0xFFFFF800036FEDF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetQuotaInformationFile - OK - 0xFFFFF8000373ED10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSecurityObject - OK - 0xFFFFF8000356FBA8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemEnvironmentValue - OK - 0xFFFFF80003719C70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemEnvironmentValueEx - OK - 0xFFFFF8000373E2D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemInformation - OK - 0xFFFFF8000374BDF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemPowerState - OK - 0xFFFFF80003522390 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetSystemTime - OK - 0xFFFFF800036F1E90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetThreadExecutionState - OK - 0xFFFFF8000371C260 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimerEx - OK - 0xFFFFF8000327FED8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetTimerResolution - OK - 0xFFFFF800036FD3C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetUuidSeed - OK - 0xFFFFF8000372DB10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSetVolumeInformationFile - OK - 0xFFFFF800035F4DA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtShutdownSystem - OK - 0xFFFFF80003757A00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtShutdownWorkerFactory - OK - 0xFFFFF8000358AC4C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSignalAndWaitForSingleObject - OK - 0xFFFFF800033E8D40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSinglePhaseReject - OK - 0xFFFFF80003727B60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtStartProfile - OK - 0xFFFFF800037366E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtStopProfile - OK - 0xFFFFF80003701F80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSuspendProcess - OK - 0xFFFFF80003725840 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSuspendThread - OK - 0xFFFFF80003527394 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtSystemDebugControl - OK - 0xFFFFF80003565F3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTerminateJobObject - OK - 0xFFFFF80003534D60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTestAlert - OK - 0xFFFFF800035C642C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtThawRegistry - OK - 0xFFFFF800033D1DB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtThawTransactions - OK - 0xFFFFF800036AC1A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTraceControl - OK - 0xFFFFF80003579714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtTranslateFilePath - OK - 0xFFFFF800036FBFE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUmsThreadYield - OK - 0xFFFFF8000365CFA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadDriver - OK - 0xFFFFF800036BE9C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadKey - OK - 0xFFFFF80003561020 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadKey2 - OK - 0xFFFFF800035592F4 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnloadKeyEx - OK - 0xFFFFF80003727340 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnlockFile - OK - 0xFFFFF80003548C40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtUnlockVirtualMemory - OK - 0xFFFFF800033E8270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtVdmControl - OK - 0xFFFFF8000373B640 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForDebugEvent - OK - 0xFFFFF8000370EFE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForKeyedEvent - OK - 0xFFFFF800035BB754 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitForWorkViaWorkerFactory - OK - 0xFFFFF800032BBBC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitHighEventPair - OK - 0xFFFFF800036F5220 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWaitLowEventPair - OK - 0xFFFFF800036F52B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       NtWorkerFactoryWorkerReady - OK - 0xFFFFF800032C40C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Shadow SSDT

       NtUserGetThreadState - OK - 0xFFFFF960001A7560 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPeekMessage - OK - 0xFFFFF960001A4620 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallOneParam - OK - 0xFFFFF960001B5C6C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyState - ssdt hook - 0xFFFFF960001C3F7A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInvalidateRect - OK - 0xFFFFF960001BD2F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallNoParam - ssdt hook - 0xFFFFF960001B5E5E - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetMessage - OK - 0xFFFFF960001AD5A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMessageCall - ssdt hook - 0xFFFFF96000191B32 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBitBlt - ssdt hook - 0xFFFFF960001B77BE - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharSet - OK - 0xFFFFF960002B38AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetDC - OK - 0xFFFFF960001A0DF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectBitmap - OK - 0xFFFFF96000198BD4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserWaitMessage - OK - 0xFFFFF960001C02B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserTranslateMessage - OK - 0xFFFFF960001BEC8C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetProp - OK - 0xFFFFF960001C2600 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPostMessage - ssdt hook - 0xFFFFF960001B2716 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserQueryWindow - OK - 0xFFFFF960001653A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserTranslateAccelerator - OK - 0xFFFFF960001B8CD4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFlush - OK - 0xFFFFF96000158A5C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRedrawWindow - OK - 0xFFFFF960001BF680 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserWindowFromPoint - ssdt hook - 0xFFFFF960001BEF76 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallMsgFilter - OK - 0xFFFFF960001C3984 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserValidateTimerCallback - OK - 0xFFFFF960001B73B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBeginPaint - OK - 0xFFFFF960001BF110 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetTimer - OK - 0xFFFFF96000165788 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEndPaint - OK - 0xFFFFF960001BF2B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetCursor - OK - 0xFFFFF960001BDE70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserKillTimer - OK - 0xFFFFF960001660B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBuildHwndList - OK - 0xFFFFF96000155E5C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSelectPalette - OK - 0xFFFFF9600015B798 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallNextHookEx - OK - 0xFFFFF960001C68E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserHideCaret - OK - 0xFFFFF960001BD0F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiIntersectClipRect - OK - 0xFFFFF960002DE488 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndLock - OK - 0xFFFFF960001BBDA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetProcessWindowStation - OK - 0xFFFFF9600019B78C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteObjectApp - OK - 0xFFFFF96000167FE0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowPos - OK - 0xFFFFF960001B91F4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserShowCaret - OK - 0xFFFFF960001BE5E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEndDeferWindowPosEx - OK - 0xFFFFF960001B8A50 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndParamLock - OK - 0xFFFFF960001BBFD0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserVkKeyScanEx - OK - 0xFFFFF960001C278C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetDIBitsToDeviceInternal - OK - 0xFFFFF960001606D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallTwoParam - OK - 0xFFFFF96000167F64 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRandomRgn - OK - 0xFFFFF960002DE418 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCopyAcceleratorTable - OK - 0xFFFFF960001C1DA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserNotifyWinEvent - OK - 0xFFFFF960001BA3E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtSelectClipRgn - OK - 0xFFFFF960002DE324 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserIsClipboardFormatAvailable - OK - 0xFFFFF960001BD43C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetScrollInfo - OK - 0xFFFFF9600015F5C8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiStretchBlt - ssdt hook - 0xFFFFF960002DE33A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateCaret - OK - 0xFFFFF960001BF208 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRectVisible - OK - 0xFFFFF960002DD104 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCombineRgn - OK - 0xFFFFF960002DE740 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCObject - OK - 0xFFFFF9600015C650 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDispatchMessage - OK - 0xFFFFF960001BB590 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterWindowMessage - OK - 0xFFFFF9600019A25C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtTextOutW - OK - 0xFFFFF960002DEC1C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectFont - OK - 0xFFFFF960002DE318 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRestoreDC - OK - 0xFFFFF9600015C7A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSaveDC - OK - 0xFFFFF9600015B85C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetForegroundWindow - OK - 0xFFFFF96000153F68 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserShowScrollBar - OK - 0xFFFFF960001BE658 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserFindExistingCursorIcon - OK - 0xFFFFF96000189338 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCDword - OK - 0xFFFFF96000107060 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRegionData - OK - 0xFFFFF96000296AC4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiLineTo - OK - 0xFFFFF960002E36F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSystemParametersInfo - OK - 0xFFFFF9600019B7BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetAppClipBox - OK - 0xFFFFF960002DD1B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetAsyncKeyState - ssdt hook - 0xFFFFF960001BC72A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetCPD - OK - 0xFFFFF960001C1D1C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoveProp - OK - 0xFFFFF960001C2508 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDoPalette - OK - 0xFFFFF9600017E110 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyPolyDraw - OK - 0xFFFFF960002DC478 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetCapture - OK - 0xFFFFF960001BDC58 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEnumDisplayMonitors - OK - 0xFFFFF960001C72EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateCompatibleBitmap - OK - 0xFFFFF9600016AC70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetProp - OK - 0xFFFFF960001C2684 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextCharsetInfo - OK - 0xFFFFF960002E019C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSBGetParms - OK - 0xFFFFF960001C40C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetIconInfo - OK - 0xFFFFF960001847C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserExcludeUpdateRgn - OK - 0xFFFFF960001BF3A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetFocus - OK - 0xFFFFF960001BDEDC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtGetObjectW - OK - 0xFFFFF9600016AB84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDeferWindowPos - OK - 0xFFFFF960001B8878 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetUpdateRect - OK - 0xFFFFF960001BD028 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateCompatibleDC - OK - 0xFFFFF96000198A30 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardSequenceNumber - OK - 0xFFFFF960001BCE10 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreatePen - inline hook - 0xFFFFF960002DE330 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserShowWindow - OK - 0xFFFFF9600017E008 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyboardLayoutList - OK - 0xFFFFF96000132C50 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPatBlt - OK - 0xFFFFF960002D880C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMapVirtualKeyEx - OK - 0xFFFFF960001C2474 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowLong - ssdt hook - 0xFFFFF9600015F6D2 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiHfontCreate - OK - 0xFFFFF96000106F20 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMoveWindow - OK - 0xFFFFF960001B8BAC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPostThreadMessage - ssdt hook - 0xFFFFF96000165CEA - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDrawIconEx - OK - 0xFFFFF960001B8700 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetSystemMenu - OK - 0xFFFFF96000175BBC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDrawStream - OK - 0xFFFFF960002E05E4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInternalGetWindowText - OK - 0xFFFFF960001BFD00 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowDC - OK - 0xFFFFF960001BF580 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiD3dDrawPrimitives2 - OK - 0xFFFFF9600026E3E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiInvertRgn - OK - 0xFFFFF96000294F88 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRgnBox - OK - 0xFFFFF960002DE84C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetAndSetDCDword - OK - 0xFFFFF960002E20B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMaskBlt - ssdt hook - 0xFFFFF960002DD422 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetWidthTable - OK - 0xFFFFF9600013E310 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserScrollDC - OK - 0xFFFFF96000154AB0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetObjectInformation - OK - 0xFFFFF9600019B238 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateBitmap - OK - 0xFFFFF96000198A74 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserFindWindowEx - ssdt hook - 0xFFFFF960001C1E9A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyPatBlt - OK - 0xFFFFF960002D8B98 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnhookWindowsHookEx - OK - 0xFFFFF960001BED18 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetNearestColor - OK - 0xFFFFF9600015F82C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiTransformPoints - OK - 0xFFFFF960002E003C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCPoint - OK - 0xFFFFF960002DFEAC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateDIBBrush - OK - 0xFFFFF960002E9DB0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextMetricsW - OK - 0xFFFFF96000106FF0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateWindowEx - OK - 0xFFFFF96000191D04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetParent - ssdt hook - 0xFFFFF960001BE0CE - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyboardState - ssdt hook - 0xFFFFF960001C3DFE - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserToUnicodeEx - OK - 0xFFFFF960001BFFF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetControlBrush - OK - 0xFFFFF960001BC888 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClassName - OK - 0xFFFFF960001C203C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAlphaBlend - ssdt hook - 0xFFFFF9600027291A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdBlt - OK - 0xFFFFF9600026DFC8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiOffsetRgn - OK - 0xFFFFF960002DE840 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDefSetText - OK - 0xFFFFF960001C09F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextFaceW - OK - 0xFFFFF9600013DD84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiStretchDIBitsInternal - OK - 0xFFFFF96000182B70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSendInput - ssdt hook - 0xFFFFF960001C19C2 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetThreadDesktop - OK - 0xFFFFF96000198004 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateRectRgn - OK - 0xFFFFF96000106390 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDIBitsInternal - OK - 0xFFFFF9600018227C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetUpdateRgn - OK - 0xFFFFF960001BF5E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteClientObj - OK - 0xFFFFF960002E1510 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetIconSize - OK - 0xFFFFF9600018499C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserFillWindow - OK - 0xFFFFF960001B98F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtCreateRegion - OK - 0xFFFFF960002DCAC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiComputeXformCoefficients - OK - 0xFFFFF960002E233C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowsHookEx - ssdt hook - 0xFFFFF9600015F98E - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserNotifyProcessCreate - OK - 0xFFFFF96000199FB8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiUnrealizeObject - OK - 0xFFFFF960002DE6B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetTitleBarInfo - OK - 0xFFFFF960001BA618 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRectangle - OK - 0xFFFFF960002E5FFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadDesktop - OK - 0xFFFFF9600015F840 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetDCEx - OK - 0xFFFFF960001BF410 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetScrollBarInfo - OK - 0xFFFFF960001BA9F4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextExtent - OK - 0xFFFFF960002DE990 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowFNID - OK - 0xFFFFF96000154188 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetLayout - OK - 0xFFFFF960002DFD90 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCalcMenuBar - OK - 0xFFFFF960001BEB10 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserThunkedMenuItemInfo - OK - 0xFFFFF960001759FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExcludeClipRect - OK - 0xFFFFF960002DE4A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateDIBSection - OK - 0xFFFFF960001B6568 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDCforBitmap - OK - 0xFFFFF960001608F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyCursor - OK - 0xFFFFF96000159330 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyWindow - OK - 0xFFFFF960001B24F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndParam - OK - 0xFFFFF960001BBF00 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateDIBitmapInternal - OK - 0xFFFFF9600016A804 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserOpenWindowStation - OK - 0xFFFFF960001B7FB8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDeleteSurfaceObject - OK - 0xFFFFF9600026E094 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCanCreateSurface - OK - 0xFFFFF9600026DFDC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateSurface - OK - 0xFFFFF9600026E018 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetCursorIconData - OK - 0xFFFFF9600016D954 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDestroySurface - OK - 0xFFFFF9600026E0BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCloseDesktop - OK - 0xFFFFF96000160294 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserOpenDesktop - OK - 0xFFFFF960001B81A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetProcessWindowStation - OK - 0xFFFFF96000150A3C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetAtomName - OK - 0xFFFFF960001933B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdResetVisrgn - OK - 0xFFFFF9600026E248 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtCreatePen - OK - 0xFFFFF960002DC8A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreatePaletteInternal - OK - 0xFFFFF96000155D50 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBrushOrg - OK - 0xFFFFF960002DE664 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBuildNameList - OK - 0xFFFFF960001C14A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetPixel - OK - 0xFFFFF960002ED6E4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterClassExWOW - OK - 0xFFFFF9600018A900 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreatePatternBrushInternal - OK - 0xFFFFF960002E9DA4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetAncestor - OK - 0xFFFFF960001BAAF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetOutlineTextMetricsInternalW - OK - 0xFFFFF960001180B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBitmapBits - OK - 0xFFFFF960002DE76C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCloseWindowStation - OK - 0xFFFFF96000162D5C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetDoubleClickTime - OK - 0xFFFFF960001BCEC8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEnableScrollBar - OK - 0xFFFFF960001BBBA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateSolidBrush - OK - 0xFFFFF960001994C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClassInfoEx - OK - 0xFFFFF960001AE9D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateClientObj - OK - 0xFFFFF960002E1448 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterClass - OK - 0xFFFFF960001B2FFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDeleteMenu - OK - 0xFFFFF96000188728 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRectInRegion - OK - 0xFFFFF960002DE89C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserScrollWindowEx - OK - 0xFFFFF960001BDA24 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPixel - OK - 0xFFFFF960002EDC08 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetClassLong - OK - 0xFFFFF960001B8FA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetMenuBarInfo - OK - 0xFFFFF960001BAD48 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateSurfaceEx - OK - 0xFFFFF9600026E438 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateSurfaceObject - OK - 0xFFFFF9600026E064 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetNearestPaletteIndex - OK - 0xFFFFF960002EBCBC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdLockD3D - OK - 0xFFFFF9600026E2FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdUnlockD3D - OK - 0xFFFFF9600026E310 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharWidthW - OK - 0xFFFFF960002DD4A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInvalidateRgn - OK - 0xFFFFF960001BF794 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardOwner - OK - 0xFFFFF960001BCE48 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowRgn - OK - 0xFFFFF960001BF840 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBitBltSysBmp - OK - 0xFFFFF960001C41CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharWidthInfo - OK - 0xFFFFF960002E0394 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserValidateRect - OK - 0xFFFFF960001BEE1C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCloseClipboard - OK - 0xFFFFF960001B9E10 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserOpenClipboard - OK - 0xFFFFF960001BD7E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetStockObject - OK - 0xFFFFF96000197BB0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetClipboardData - OK - 0xFFFFF960001BA068 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEnableMenuItem - OK - 0xFFFFF960001BB614 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserAlterWindowStyle - OK - 0xFFFFF960001C0DD8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFillRgn - OK - 0xFFFFF96000294040 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowPlacement - OK - 0xFFFFF960001BB77C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiModifyWorldTransform - OK - 0xFFFFF960002C1FD0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontData - OK - 0xFFFFF9600012B12C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetOpenClipboardWindow - OK - 0xFFFFF960001BCF30 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadState - OK - 0xFFFFF960001C0E60 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiOpenDCW - OK - 0xFFFFF96000156480 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserTrackMouseEvent - OK - 0xFFFFF960001BE720 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTransform - OK - 0xFFFFF960002DFF48 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyMenu - OK - 0xFFFFF960001BB538 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetBitmapBits - OK - 0xFFFFF960002DC7D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserConsoleControl - OK - 0xFFFFF9600015DA98 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetActiveWindow - OK - 0xFFFFF960001BDBB8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetInformationThread - OK - 0xFFFFF96000161E68 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowPlacement - OK - 0xFFFFF960001BB838 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetControlColor - OK - 0xFFFFF960001BC93C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetMetaRgn - OK - 0xFFFFF960002DD154 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetMiterLimit - OK - 0xFFFFF960002DD29C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetVirtualResolution - OK - 0xFFFFF960002C13CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRasterizerCaps - OK - 0xFFFFF960002DDD50 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowWord - OK - 0xFFFFF960001BE4E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardFormatName - OK - 0xFFFFF960001C214C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRealInternalGetMessage - OK - 0xFFFFF960001B8AE0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateLocalMemHandle - OK - 0xFFFFF960001BA1B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserAttachThreadInput - ssdt hook - 0xFFFFF960001BB6C6 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateHalftonePalette - OK - 0xFFFFF96000155D3C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPaintMenuBar - OK - 0xFFFFF960001BEA14 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetKeyboardState - OK - 0xFFFFF960001B9064 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCombineTransform - OK - 0xFFFFF960002DFFA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateAcceleratorTable - OK - 0xFFFFF960001BB220 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetCursorFrameInfo - OK - 0xFFFFF960001C0590 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetAltTabInfo - OK - 0xFFFFF960001BABB8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetCaretBlinkTime - OK - 0xFFFFF960001029AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiQueryFontAssocInfo - OK - 0xFFFFF96000196E80 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserProcessConnect - OK - 0xFFFFF96000198DB0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEnumDisplayDevices - OK - 0xFFFFF960001C28B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEmptyClipboard - OK - 0xFFFFF960001B9EF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardData - OK - 0xFFFFF960001BB360 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoveMenu - OK - 0xFFFFF960001BD960 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBoundsRect - OK - 0xFFFFF960002DE05C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetBitmapDimension - OK - 0xFFFFF960002E0224 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserConvertMemHandle - OK - 0xFFFFF960001BA130 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyAcceleratorTable - OK - 0xFFFFF960001BB300 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetGUIThreadInfo - OK - 0xFFFFF960001BA538 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCloseFigure - OK - 0xFFFFF960002EE34C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowsHookAW - OK - 0xFFFFF960001BE55C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenuDefaultItem - OK - 0xFFFFF960001BC18C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCheckMenuItem - OK - 0xFFFFF960001BB06C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWinEventHook - ssdt hook - 0xFFFFF960001BA29A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnhookWinEvent - OK - 0xFFFFF960001BA354 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserLockWindowUpdate - OK - 0xFFFFF960001BBAA4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetSystemMenu - OK - 0xFFFFF960001C16D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserThunkedMenuInfo - OK - 0xFFFFF960001BC0C4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBeginPath - OK - 0xFFFFF960002EE4E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEndPath - OK - 0xFFFFF960002EE5F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFillPath - OK - 0xFFFFF960002EEAC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwnd - OK - 0xFFFFF960001BBD04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDdeInitialize - OK - 0xFFFFF960001B967C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserModifyUserStartupInfoFlags - OK - 0xFFFFF960001C0D68 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCountClipboardFormats - OK - 0xFFFFF960001BCDBC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAddFontMemResourceEx - OK - 0xFFFFF960002DEF9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEqualRgn - OK - 0xFFFFF96000293F84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetSystemPaletteUse - OK - 0xFFFFF960002DE400 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRemoveFontMemResourceEx - OK - 0xFFFFF960002DF300 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEnumDisplaySettings - OK - 0xFFFFF96000132D90 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPaintDesktop - OK - 0xFFFFF960001BC4A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtEscape - OK - 0xFFFFF960002DD790 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBitmapDimension - OK - 0xFFFFF960002E0270 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetFontEnumeration - OK - 0xFFFFF9600010FEEC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserChangeClipboardChain - OK - 0xFFFFF960001BAF88 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetClipboardViewer - OK - 0xFFFFF960001BDDD0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserShowWindowAsync - OK - 0xFFFFF9600015F138 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateColorSpace - OK - 0xFFFFF960002EF4E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteColorSpace - OK - 0xFFFFF960002EF5E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserActivateKeyboardLayout - OK - 0xFFFFF960001C15C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAbortDoc - OK - 0xFFFFF9600027B5B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAbortPath - OK - 0xFFFFF960002EE424 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAddEmbFontToDC - OK - 0xFFFFF9600027BEE0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAddFontResourceW - OK - 0xFFFFF9600014E430 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAddRemoteFontToDC - OK - 0xFFFFF960002AD9B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAddRemoteMMInstanceToDC - OK - 0xFFFFF9600027C750 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAngleArc - OK - 0xFFFFF960002DD204 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiAnyLinkedFonts - OK - 0xFFFFF9600010635C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiArcInternal - OK - 0xFFFFF960002F23A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_DeleteRbrush - OK - 0xFFFFF960002F9A08 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_hGetColorTransform - OK - 0xFFFFF960002F87C4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_pvAllocRbrush - OK - 0xFFFFF960002F85F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_pvGetRbrush - OK - 0xFFFFF960002F8670 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBRUSHOBJ_ulGetBrushColor - OK - 0xFFFFF960002F86DC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiBeginGdiRendering - OK - 0xFFFFF960002DE4E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCLIPOBJ_bEnum - OK - 0xFFFFF960002F84D4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCLIPOBJ_cEnumStart - OK - 0xFFFFF960002F8410 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCLIPOBJ_ppoGetPath - OK - 0xFFFFF960002F820C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCancelDC - OK - 0xFFFFF960002DE28C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiChangeGhostFont - OK - 0xFFFFF960002DF72C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCheckBitmapBits - OK - 0xFFFFF960002EFF78 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiClearBitmapAttributes - OK - 0xFFFFF960002DE604 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiClearBrushAttributes - OK - 0xFFFFF960002DE644 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiColorCorrectPalette - OK - 0xFFFFF960002F0158 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiConfigureOPMProtectedOutput - OK - 0xFFFFF960002FBB38 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiConvertMetafileRect - OK - 0xFFFFF960002C024C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateBitmapFromDxSurface - OK - 0xFFFFF960002DE4C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateColorTransform - OK - 0xFFFFF960002EFA44 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateEllipticRgn - OK - 0xFFFFF96000293AF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateHatchBrushInternal - OK - 0xFFFFF960002E9D60 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateMetafileDC - OK - 0xFFFFF960002E6734 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateOPMProtectedOutputs - OK - 0xFFFFF960002FB6B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateRoundRectRgn - OK - 0xFFFFF96000293DC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiCreateServerMetaFile - OK - 0xFFFFF960002FC314 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiD3dContextCreate - OK - 0xFFFFF9600026E398 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiD3dContextDestroy - OK - 0xFFFFF9600026E3AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiD3dContextDestroyAll - OK - 0xFFFFF9600026E3C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiD3dValidateTextureStageState - OK - 0xFFFFF9600026E3D4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetCapabilitiesString - OK - 0xFFFFF960002FD914 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetCapabilitiesStringLength - OK - 0xFFFFF960002FD8B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetTimingReport - OK - 0xFFFFF960002FD9AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCIGetVCPFeature - OK - 0xFFFFF960002FD62C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCISaveCurrentSettings - OK - 0xFFFFF960002FD7F4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDDCCISetVCPFeature - OK - 0xFFFFF960002FD6F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdAddAttachedSurface - OK - 0xFFFFF9600026DFA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdAlphaBlt - OK - 0xFFFFF9600026E514 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdAttachSurface - OK - 0xFFFFF9600026DFB4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdBeginMoCompFrame - OK - 0xFFFFF9600026E4C4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCanCreateD3DBuffer - OK - 0xFFFFF9600026E370 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdColorControl - OK - 0xFFFFF9600026DFF0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateD3DBuffer - OK - 0xFFFFF9600026E324 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateDirectDrawObject - OK - 0xFFFFF9600026E004 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateFullscreenSprite - OK - 0xFFFFF96000272844 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdCreateMoComp - OK - 0xFFFFF9600026E49C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIAcquireKeyedMutex - OK - 0xFFFFF960002721B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckExclusiveOwnership - OK - 0xFFFFF96000272100 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckMonitorPowerState - OK - 0xFFFFF960002720CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckOcclusion - OK - 0xFFFFF96000272084 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckSharedResourceAccess - OK - 0xFFFFF96000272268 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICheckVidPnExclusiveOwnership - OK - 0xFFFFF96000272244 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICloseAdapter - OK - 0xFFFFF960001B6540 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIConfigureSharedResource - OK - 0xFFFFF960002721FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateAllocation - OK - 0xFFFFF96000270FD4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateContext - OK - 0xFFFFF960002710F4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateDCFromMemory - OK - 0xFFFFF96000271910 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateDevice - OK - 0xFFFFF960002710AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateKeyedMutex - OK - 0xFFFFF96000272148 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateOverlay - OK - 0xFFFFF96000271794 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDICreateSynchronizationObject - OK - 0xFFFFF9600027113C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyAllocation - OK - 0xFFFFF96000271040 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyContext - OK - 0xFFFFF96000271118 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyDCFromMemory - OK - 0xFFFFF96000271E2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyDevice - OK - 0xFFFFF960002710D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyKeyedMutex - OK - 0xFFFFF96000272190 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroyOverlay - OK - 0xFFFFF96000271800 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIDestroySynchronizationObject - OK - 0xFFFFF96000271184 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIEscape - OK - 0xFFFFF96000271728 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIFlipOverlay - OK - 0xFFFFF960002717DC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetContextSchedulingPriority - OK - 0xFFFFF96000271F2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetDeviceState - OK - 0xFFFFF9600027186C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetDisplayModeList - OK - 0xFFFFF96000271260 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetMultisampleMethodList - OK - 0xFFFFF960002712E4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetOverlayState - OK - 0xFFFFF96000272220 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetPresentHistory - OK - 0xFFFFF960002716D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetPresentQueueEvent - OK - 0xFFFFF960002715C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetProcessSchedulingPriorityClass - OK - 0xFFFFF96000271F74 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetRuntimeData - OK - 0xFFFFF960002711F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetScanLine - OK - 0xFFFFF96000271FF4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIGetSharedPrimaryHandle - OK - 0xFFFFF96000271704 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIInvalidateActiveVidPn - OK - 0xFFFFF96000272060 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDILock - OK - 0xFFFFF96000271214 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenAdapterFromDeviceName - OK - 0xFFFFF960001B62B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenAdapterFromHdc - OK - 0xFFFFF96000271358 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenKeyedMutex - OK - 0xFFFFF9600027216C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenResource - OK - 0xFFFFF9600027101C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIOpenSynchronizationObject - OK - 0xFFFFF96000271160 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIPollDisplayChildren - OK - 0xFFFFF9600027203C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIPresent - OK - 0xFFFFF96000271308 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryAdapterInfo - OK - 0xFFFFF960001B6290 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryAllocationResidency - OK - 0xFFFFF96000271088 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryResourceInfo - OK - 0xFFFFF96000270FF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIQueryStatistics - OK - 0xFFFFF9600027174C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIReleaseKeyedMutex - OK - 0xFFFFF960002721D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIReleaseProcessVidPnSourceOwners - OK - 0xFFFFF96000271F98 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIRender - OK - 0xFFFFF96000271334 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetAllocationPriority - OK - 0xFFFFF96000271064 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetContextSchedulingPriority - OK - 0xFFFFF96000271F08 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetDisplayMode - OK - 0xFFFFF96000271284 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetDisplayPrivateDriverFormat - OK - 0xFFFFF96000272124 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetGammaRamp - OK - 0xFFFFF96000271848 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetProcessSchedulingPriorityClass - OK - 0xFFFFF96000271F50 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetQueuedLimit - OK - 0xFFFFF96000272018 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISetVidPnSourceOwner - OK - 0xFFFFF96000271770 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISharedPrimaryLockNotification - OK - 0xFFFFF96000270F24 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISharedPrimaryUnLockNotification - OK - 0xFFFFF96000270F80 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDISignalSynchronizationObject - OK - 0xFFFFF960002711CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIUnlock - OK - 0xFFFFF96000271238 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIUpdateOverlay - OK - 0xFFFFF960002717B8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForIdle - OK - 0xFFFFF960002720A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForSynchronizationObject - OK - 0xFFFFF960002711A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDDIWaitForVerticalBlankEvent - OK - 0xFFFFF96000271824 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDeleteDirectDrawObject - OK - 0xFFFFF9600026E0A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDestroyD3DBuffer - OK - 0xFFFFF9600026E384 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDestroyFullscreenSprite - OK - 0xFFFFF9600027285C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdDestroyMoComp - OK - 0xFFFFF9600026E4B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdEndMoCompFrame - OK - 0xFFFFF9600026E4D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdFlip - OK - 0xFFFFF9600026E0D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdFlipToGDISurface - OK - 0xFFFFF9600026E184 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetAvailDriverMemory - OK - 0xFFFFF9600026E0F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetBltStatus - OK - 0xFFFFF9600026E10C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetDC - OK - 0xFFFFF9600026E120 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetDriverInfo - OK - 0xFFFFF9600026E134 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetDriverState - OK - 0xFFFFF9600026E424 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetDxHandle - OK - 0xFFFFF9600026E2D4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetFlipStatus - OK - 0xFFFFF9600026E148 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetInternalMoCompInfo - OK - 0xFFFFF9600026E488 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetMoCompBuffInfo - OK - 0xFFFFF9600026E474 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetMoCompFormats - OK - 0xFFFFF9600026E460 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetMoCompGuids - OK - 0xFFFFF9600026E44C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdGetScanLine - OK - 0xFFFFF9600026E15C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdLock - OK - 0xFFFFF9600026E198 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdNotifyFullscreenSpriteUpdate - OK - 0xFFFFF96000272850 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdQueryDirectDrawObject - OK - 0xFFFFF9600026E1AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdQueryMoCompStatus - OK - 0xFFFFF9600026E500 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdQueryVisRgnUniqueness - OK - 0xFFFFF96000272868 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdReenableDirectDrawObject - OK - 0xFFFFF9600026E220 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdReleaseDC - OK - 0xFFFFF9600026E234 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdRenderMoComp - OK - 0xFFFFF9600026E4EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdSetColorKey - OK - 0xFFFFF9600026E25C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdSetExclusiveMode - OK - 0xFFFFF9600026E170 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdSetGammaRamp - OK - 0xFFFFF9600026E2E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdSetOverlayPosition - OK - 0xFFFFF9600026E270 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdUnattachSurface - OK - 0xFFFFF9600026E284 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdUnlock - OK - 0xFFFFF9600026E298 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdUpdateOverlay - OK - 0xFFFFF9600026E2AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDdWaitForVerticalBlank - OK - 0xFFFFF9600026E2C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDeleteColorTransform - OK - 0xFFFFF960002EFD3C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDescribePixelFormat - OK - 0xFFFFF960002E0308 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDestroyOPMProtectedOutput - OK - 0xFFFFF960002FBC90 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDestroyPhysicalMonitor - OK - 0xFFFFF960002FDA18 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDoBanding - OK - 0xFFFFF9600027BA9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDrawEscape - OK - 0xFFFFF960002DD648 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpAcquireNotification - OK - 0xFFFFF9600026E654 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpCanCreateVideoPort - OK - 0xFFFFF9600026E528 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpColorControl - OK - 0xFFFFF9600026E53C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpCreateVideoPort - OK - 0xFFFFF9600026E550 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpDestroyVideoPort - OK - 0xFFFFF9600026E564 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpFlipVideoPort - OK - 0xFFFFF9600026E578 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortBandwidth - OK - 0xFFFFF9600026E58C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortConnectInfo - OK - 0xFFFFF9600026E604 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortField - OK - 0xFFFFF9600026E5A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortFlipStatus - OK - 0xFFFFF9600026E5B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortInputFormats - OK - 0xFFFFF9600026E5C8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortLine - OK - 0xFFFFF9600026E5DC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoPortOutputFormats - OK - 0xFFFFF9600026E5F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpGetVideoSignalStatus - OK - 0xFFFFF9600026E618 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpReleaseNotification - OK - 0xFFFFF9600026E668 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpUpdateVideoPort - OK - 0xFFFFF9600026E62C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDvpWaitForVideoPortSync - OK - 0xFFFFF9600026E640 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiDxgGenericThunk - OK - 0xFFFFF9600026DF70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEllipse - OK - 0xFFFFF960002E2BB8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEnableEudc - OK - 0xFFFFF9600030131C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEndDoc - OK - 0xFFFFF9600027B5A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEndGdiRendering - OK - 0xFFFFF960002DE59C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEndPage - OK - 0xFFFFF9600027B71C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngAlphaBlend - OK - 0xFFFFF960002F6E90 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngAssociateSurface - OK - 0xFFFFF960002F3C04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngBitBlt - OK - 0xFFFFF960002F592C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCheckAbort - OK - 0xFFFFF960002FA50C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngComputeGlyphSet - OK - 0xFFFFF960002FA5C4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCopyBits - OK - 0xFFFFF960002F4024 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateBitmap - OK - 0xFFFFF960002F3DCC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateClip - OK - 0xFFFFF960002F8328 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateDeviceBitmap - OK - 0xFFFFF960002F9BFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreateDeviceSurface - OK - 0xFFFFF960002F9B60 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngCreatePalette - OK - 0xFFFFF960002F7F2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeleteClip - OK - 0xFFFFF960002F83B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeletePalette - OK - 0xFFFFF960002F8018 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeletePath - OK - 0xFFFFF960002F82C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngDeleteSurface - OK - 0xFFFFF960002F3CBC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngEraseSurface - OK - 0xFFFFF960002F8024 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngFillPath - OK - 0xFFFFF960002F63C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngGradientFill - OK - 0xFFFFF960002F727C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngLineTo - OK - 0xFFFFF960002F6C04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngLockSurface - OK - 0xFFFFF960002F5898 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngMarkBandingSurface - OK - 0xFFFFF960002F3D40 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngPaint - OK - 0xFFFFF960002F698C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngPlgBlt - OK - 0xFFFFF960002F522C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStretchBlt - OK - 0xFFFFF960002F43E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStretchBltROP - OK - 0xFFFFF960002F4A9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStrokeAndFillPath - OK - 0xFFFFF960002F663C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngStrokePath - OK - 0xFFFFF960002F60BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngTextOut - OK - 0xFFFFF960002F7B18 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngTransparentBlt - OK - 0xFFFFF960002F77BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEngUnlockSurface - OK - 0xFFFFF960002F58E4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEnumFonts - OK - 0xFFFFF960002DF320 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEnumObjects - OK - 0xFFFFF960003016AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiEudcLoadUnloadLink - OK - 0xFFFFF96000301328 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiExtFloodFill - OK - 0xFFFFF96000302EF4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_cGetAllGlyphHandles - OK - 0xFFFFF960002F8E5C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_cGetGlyphs - OK - 0xFFFFF960002F8B84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pQueryGlyphAttrs - OK - 0xFFFFF960002F9158 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pfdg - OK - 0xFFFFF960002F9038 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pifi - OK - 0xFFFFF960002F927C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pvTrueTypeFontFile - OK - 0xFFFFF960002FA230 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_pxoGetXform - OK - 0xFFFFF960002F8F64 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFONTOBJ_vGetInfo - OK - 0xFFFFF960002F8A98 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFlattenPath - OK - 0xFFFFF960002EE66C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFontIsLinked - OK - 0xFFFFF9600011028C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiForceUFIMapping - OK - 0xFFFFF960002E02C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFrameRgn - OK - 0xFFFFF960002946EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiFullscreenControl - OK - 0xFFFFF9600029F388 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetBoundsRect - OK - 0xFFFFF960002DC770 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCOPPCompatibleOPMInformation - OK - 0xFFFFF960002FBAA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCertificate - OK - 0xFFFFF960002FB7B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCertificateSize - OK - 0xFFFFF960002FB73C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharABCWidthsW - OK - 0xFFFFF9600012AA9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetCharacterPlacementW - OK - 0xFFFFF960002DB970 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetColorAdjustment - OK - 0xFFFFF960002DE0D4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetColorSpaceforBitmap - OK - 0xFFFFF960002EAC70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceCaps - OK - 0xFFFFF960001A1190 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceCapsAll - OK - 0xFFFFF960002E0EB0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceGammaRamp - OK - 0xFFFFF960002F0330 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDeviceWidth - OK - 0xFFFFF960002DFE4C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetDhpdev - OK - 0xFFFFF960002F9710 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetETM - OK - 0xFFFFF96000305334 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetEmbUFI - OK - 0xFFFFF960002DF894 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetEmbedFonts - OK - 0xFFFFF960002DF6F4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetEudcTimeStampEx - OK - 0xFFFFF960002FFF84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontFileData - OK - 0xFFFFF96000306408 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontFileInfo - OK - 0xFFFFF9600030666C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontResourceInfoInternalW - OK - 0xFFFFF960002DF4C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetFontUnicodeRanges - OK - 0xFFFFF960002E0530 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetGlyphIndicesW - OK - 0xFFFFF9600012B4F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetGlyphIndicesWInternal - OK - 0xFFFFF9600012B520 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetGlyphOutline - OK - 0xFFFFF960002DDBB4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetKerningPairs - OK - 0xFFFFF960002DDE00 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetLinkedUFIs - OK - 0xFFFFF9600027BCD4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetMiterLimit - OK - 0xFFFFF960002DD3D4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetMonitorID - OK - 0xFFFFF960002AB6A8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetNumberOfPhysicalMonitors - OK - 0xFFFFF960002FD494 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetOPMInformation - OK - 0xFFFFF960002FBA08 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetOPMRandomNumber - OK - 0xFFFFF960002FB8DC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetObjectBitmapHandle - OK - 0xFFFFF960002DDED4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPath - OK - 0xFFFFF960002EF284 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPerBandInfo - OK - 0xFFFFF9600027BBF4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPhysicalMonitorDescription - OK - 0xFFFFF960002FD584 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetPhysicalMonitors - OK - 0xFFFFF960002FD4D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetRealizationInfo - OK - 0xFFFFF9600013E1BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetServerMetaFileBits - OK - 0xFFFFF960002FC43C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       DxgStubAlphaBlt - OK - 0xFFFFF9600027278C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetStats - OK - 0xFFFFF96000307390 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetStringBitmapW - OK - 0xFFFFF96000301528 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetSuggestedOPMProtectedOutputArraySize - OK - 0xFFFFF960002FB664 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetTextExtentExW - OK - 0xFFFFF9600013D5D4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetUFI - OK - 0xFFFFF960002DF794 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGetUFIPathname - OK - 0xFFFFF960002DF9BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiGradientFill - OK - 0xFFFFF960002B1CBC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiHLSurfGetInformation - OK - 0xFFFFF960002E0790 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiHLSurfSetInformation - OK - 0xFFFFF960002E0960 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiHT_Get8BPPFormatPalette - OK - 0xFFFFF960002FA67C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiHT_Get8BPPMaskPalette - OK - 0xFFFFF960002FA728 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiIcmBrushInfo - OK - 0xFFFFF960002F08B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       EngRestoreFloatingPointState - OK - 0xFFFFF96000197900 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiInitSpool - OK - 0xFFFFF9600029E218 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeFontDir - OK - 0xFFFFF960002E03F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeInfoDC - OK - 0xFFFFF960002EACC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeObjectUnXferable - OK - 0xFFFFF960002E1030 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMakeObjectXferable - OK - 0xFFFFF960002E0F48 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMirrorWindowOrg - OK - 0xFFFFF960002DFD9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMonoBitmap - OK - 0xFFFFF960002EA8C8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiMoveTo - OK - 0xFFFFF960002DE3B4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiOffsetClipRgn - OK - 0xFFFFF96000295C28 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_bEnum - OK - 0xFFFFF960002F9CE0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_bEnumClipLines - OK - 0xFFFFF960002FA06C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_vEnumStart - OK - 0xFFFFF960002F9E44 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_vEnumStartClipLines - OK - 0xFFFFF960002F9ECC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPATHOBJ_vGetBounds - OK - 0xFFFFF960002F9C4C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPathToRegion - OK - 0xFFFFF960002EEC3C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPlgBlt - ssdt hook - 0xFFFFF960002C5BC2 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyDraw - OK - 0xFFFFF960002DCBAC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPolyTextOutW - OK - 0xFFFFF960002DCD08 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPtInRegion - OK - 0xFFFFF960002DE978 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiPtVisible - OK - 0xFFFFF96000295EFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiQueryFonts - OK - 0xFFFFF960002DEB14 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRemoveFontResourceW - OK - 0xFFFFF960002DF0EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRemoveMergeFont - OK - 0xFFFFF9600027C4CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiResetDC - OK - 0xFFFFF960002DDF34 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiResizePalette - OK - 0xFFFFF960002EC430 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiRoundRect - OK - 0xFFFFF960002E6114 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_bEnum - OK - 0xFFFFF960002F9530 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_bEnumPositionsOnly - OK - 0xFFFFF960002F9540 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_bGetAdvanceWidths - OK - 0xFFFFF960002F9554 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_dwGetCodePage - OK - 0xFFFFF960002F96AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSTROBJ_vEnumStart - OK - 0xFFFFF960002F9658 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiScaleViewportExtEx - OK - 0xFFFFF960002C0894 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiScaleWindowExtEx - OK - 0xFFFFF960002DFEF0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectBrush - OK - 0xFFFFF960002DE300 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectClipPath - OK - 0xFFFFF960002EE90C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSelectPen - OK - 0xFFFFF960002DE30C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBitmapAttributes - OK - 0xFFFFF960002DE5E4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetBrushAttributes - OK - 0xFFFFF960002DE624 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetColorAdjustment - OK - 0xFFFFF960002DE12C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetColorSpace - OK - 0xFFFFF960002EF5E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetDeviceGammaRamp - OK - 0xFFFFF960002F03BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetFontXform - OK - 0xFFFFF960002DD320 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetIcmMode - OK - 0xFFFFF960002EF908 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetLinkedUFIs - OK - 0xFFFFF9600027AD98 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetMagicColors - OK - 0xFFFFF960002ED370 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetOPMSigningKeyAndSequenceNumbers - OK - 0xFFFFF960002FB964 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetPUMPDOBJ - OK - 0xFFFFF960002F9754 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetPixelFormat - OK - 0xFFFFF96000307AE4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetRectRgn - OK - 0xFFFFF960002DE750 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetSizeDevice - OK - 0xFFFFF960002C14AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetSystemPaletteUse - OK - 0xFFFFF960002DE40C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSetTextJustification - OK - 0xFFFFF960002E94E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSfmGetNotificationTokens - OK - 0xFFFFF960002E06D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiStartDoc - OK - 0xFFFFF9600027AF00 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiStartPage - OK - 0xFFFFF9600027B5C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiStrokeAndFillPath - OK - 0xFFFFF960002EEDA8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiStrokePath - OK - 0xFFFFF960002EEFAC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiSwapBuffers - OK - 0xFFFFF96000307D54 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiTransparentBlt - ssdt hook - 0xFFFFF960002D294A - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiUMPDEngFreeUserMem - OK - 0xFFFFF960002F9AD4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       DxgStubAlphaBlt - OK - 0xFFFFF9600027278C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       EngRestoreFloatingPointState - OK - 0xFFFFF96000197900 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiUpdateColors - OK - 0xFFFFF960002EC728 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiUpdateTransform - OK - 0xFFFFF960002C23D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiWidenPath - OK - 0xFFFFF960002EE74C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiXFORMOBJ_bApplyXform - OK - 0xFFFFF960002F8830 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiXFORMOBJ_iGetXform - OK - 0xFFFFF960002F89C8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiXLATEOBJ_cGetPalette - OK - 0xFFFFF960002FA38C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiXLATEOBJ_hGetColorTransform - OK - 0xFFFFF960002FA320 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtGdiXLATEOBJ_iXlate - OK - 0xFFFFF960002FA494 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserAddClipboardFormatListener - OK - 0xFFFFF960001CA468 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserAssociateInputContext - OK - 0xFFFFF960001C6B5C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBlockInput - OK - 0xFFFFF960001C1B34 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBuildHimcList - OK - 0xFFFFF960001C6CC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserBuildPropList - OK - 0xFFFFF960001C1398 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCalculatePopupWindowPosition - OK - 0xFFFFF960001CCC9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCallHwndOpt - OK - 0xFFFFF960001BBE80 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserChangeDisplaySettings - OK - 0xFFFFF960001C2990 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserChangeWindowMessageFilterEx - OK - 0xFFFFF960001CCB10 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCheckAccessForIntegrityLevel - OK - 0xFFFFF960001CB6A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCheckDesktopByThreadId - OK - 0xFFFFF960001C1018 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCheckWindowThreadDesktop - OK - 0xFFFFF960001C0F68 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserChildWindowFromPointEx - OK - 0xFFFFF960001BB114 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserClipCursor - OK - 0xFFFFF960001BB184 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateDesktopEx - OK - 0xFFFFF96000150A84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateInputContext - OK - 0xFFFFF960001C6A74 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCreateWindowStation - OK - 0xFFFFF9600014FCCC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserCtxDisplayIOCtl - OK - 0xFFFFF960001B7C74 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDestroyInputContext - OK - 0xFFFFF960001C6AF0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDisableThreadIme - OK - 0xFFFFF960001512EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDisplayConfigGetDeviceInfo - OK - 0xFFFFF960001C3548 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDisplayConfigSetDeviceInfo - OK - 0xFFFFF960001C37AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDoSoundConnect - OK - 0xFFFFF960001CA97C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDoSoundDisconnect - OK - 0xFFFFF960001CAB58 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDragDetect - OK - 0xFFFFF960001C17F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDragObject - OK - 0xFFFFF960001B85A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDrawAnimatedRects - OK - 0xFFFFF960001BC2B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDrawCaption - OK - 0xFFFFF960001BC3C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDrawCaptionTemp - OK - 0xFFFFF960001C3B68 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDrawMenuBarTemp - OK - 0xFFFFF960001C3A48 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDwmStartRedirection - OK - 0xFFFFF960001C9040 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserDwmStopRedirection - OK - 0xFFFFF960001C90EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEndMenu - OK - 0xFFFFF960001BCA40 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEndTouchOperation - OK - 0xFFFFF960001CC878 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserEvent - OK - 0xFFFFF960001B980C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserFlashWindowEx - OK - 0xFFFFF960001C7CB0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserFrostCrashedWindow - OK - 0xFFFFF960001CAD28 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetAppImeLevel - OK - 0xFFFFF960001C6FC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetCaretPos - OK - 0xFFFFF960001C0974 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipCursor - OK - 0xFFFFF960001BBB0C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetClipboardViewer - OK - 0xFFFFF960001BCE88 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetComboBoxInfo - OK - 0xFFFFF960001BA738 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetCursorInfo - OK - 0xFFFFF960001BA8B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetDisplayConfigBufferSizes - OK - 0xFFFFF960001C2A98 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetGestureConfig - OK - 0xFFFFF960001CD964 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetGestureExtArgs - OK - 0xFFFFF960001CD538 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetGestureInfo - OK - 0xFFFFF960001CD444 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetGuiResources - OK - 0xFFFFF960001B9530 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetImeHotKey - OK - 0xFFFFF960001C6DF4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetImeInfoEx - OK - 0xFFFFF96000154304 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetInputLocaleInfo - OK - 0xFFFFF960001C2350 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetInternalWindowPos - OK - 0xFFFFF960001B9B20 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyNameText - OK - 0xFFFFF960001C21CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetKeyboardLayoutName - OK - 0xFFFFF960001C2248 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetLayeredWindowAttributes - OK - 0xFFFFF960001C804C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetListBoxInfo - OK - 0xFFFFF960001BA830 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetMenuIndex - OK - 0xFFFFF960001BBC7C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetMenuItemRect - OK - 0xFFFFF960001C0700 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetMouseMovePointsEx - OK - 0xFFFFF960001BFED8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetPriorityClipboardFormat - OK - 0xFFFFF960001BCF70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputBuffer - OK - 0xFFFFF960001C8CAC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputData - OK - 0xFFFFF960001C8420 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputDeviceInfo - OK - 0xFFFFF960001C85DC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetRawInputDeviceList - OK - 0xFFFFF960001C8924 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetRegisteredRawInputDevices - OK - 0xFFFFF960001C8C38 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetTopLevelWindow - OK - 0xFFFFF960001BB4E4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetTouchInputInfo - OK - 0xFFFFF960001CC948 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetUpdatedClipboardFormats - OK - 0xFFFFF960001CA62C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWOWClass - OK - 0xFFFFF960001B99F4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowCompositionAttribute - OK - 0xFFFFF960001CAEAC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowCompositionInfo - OK - 0xFFFFF960001CADA8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowDisplayAffinity - OK - 0xFFFFF960001BB950 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowMinimizeRect - OK - 0xFFFFF960001C97D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGetWindowRgnEx - OK - 0xFFFFF960001BFA34 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserGhostWindowFromHungWindow - OK - 0xFFFFF960001CACDC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserHardErrorControl - OK - 0xFFFFF960001B7DB4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserHiliteMenuItem - OK - 0xFFFFF960001BD168 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserHungWindowFromGhostWindow - OK - 0xFFFFF960001CAC90 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserHwndQueryRedirectionInfo - OK - 0xFFFFF960001C918C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserHwndSetRedirectionInfo - OK - 0xFFFFF960001C9580 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserImpersonateDdeClientWindow - OK - 0xFFFFF960001C1C44 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInitTask - OK - 0xFFFFF960001B9BFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInitialize - OK - 0xFFFFF960000E5778 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInitializeClientPfnArrays - OK - 0xFFFFF960000E6CA0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInjectGesture - OK - 0xFFFFF960001CD14C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserInternalGetWindowIcon - OK - 0xFFFFF960001BFDB8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserIsTopLevelWindow - OK - 0xFFFFF960001BB4A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserIsTouchWindow - OK - 0xFFFFF960001CC638 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserLoadKeyboardLayoutEx - OK - 0xFFFFF9600012440C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserLockWindowStation - OK - 0xFFFFF960001C037C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserLockWorkStation - OK - 0xFFFFF960001B8138 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserLogicalToPhysicalPoint - OK - 0xFFFFF960001CA7FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMNDragLeave - OK - 0xFFFFF960001BD748 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMNDragOver - OK - 0xFFFFF960001BD574 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMagControl - OK - 0xFFFFF960001CB8FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMagGetContextInformation - OK - 0xFFFFF960001CC084 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMagSetContextInformation - OK - 0xFFFFF960001CB9A0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserManageGestureHandlerWindow - OK - 0xFFFFF960001CD65C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMenuItemFromPoint - OK - 0xFFFFF960001C082C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserMinMaximize - OK - 0xFFFFF960001BD498 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserModifyWindowTouchCapability - OK - 0xFFFFF960001CC578 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserNotifyIMEStatus - OK - 0xFFFFF960001C7240 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserOpenInputDesktop - OK - 0xFFFFF960001B8234 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserOpenThreadDesktop - OK - 0xFFFFF960001C0EC8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPaintMonitor - OK - 0xFFFFF960001BC5AC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPhysicalToLogicalPoint - OK - 0xFFFFF960001CA8BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserPrintWindow - OK - 0xFFFFF960001C829C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserQueryDisplayConfig - OK - 0xFFFFF960001C2B84 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserQueryInformationThread - OK - 0xFFFFF960001C0AFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserQueryInputContext - OK - 0xFFFFF960001C6C04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserQuerySendMessage - OK - 0xFFFFF960001C1918 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRealChildWindowFromPoint - OK - 0xFFFFF960001BAB64 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRealWaitMessageEx - OK - 0xFFFFF960001C0314 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterErrorReportingDialog - OK - 0xFFFFF960001CAC04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterHotKey - ssdt hook - 0xFFFFF960001BD8AA - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterRawInputDevices - ssdt hook - 0xFFFFF960001C8AAE - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterServicesProcess - OK - 0xFFFFF960001CB880 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterSessionPort - OK - 0xFFFFF960001C8F60 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterTasklist - OK - 0xFFFFF960001B9DA8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRegisterUserApiHook - OK - 0xFFFFF960001BA48C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteConnect - OK - 0xFFFFF960001B79E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteRedrawRectangle - OK - 0xFFFFF960001B7B04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteRedrawScreen - OK - 0xFFFFF960001B7B9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoteStopScreenUpdates - OK - 0xFFFFF960001B7C10 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserRemoveClipboardFormatListener - OK - 0xFFFFF960001CA594 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserResolveDesktopForWOW - OK - 0xFFFFF960001B83C8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSendTouchInput - OK - 0xFFFFF960001CC6C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetAppImeLevel - OK - 0xFFFFF960001C6F18 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetChildWindowNoActivate - OK - 0xFFFFF960001CCA70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetClassWord - OK - 0xFFFFF960001BDCF8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetCursorContents - OK - 0xFFFFF960001C0674 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetDisplayConfig - OK - 0xFFFFF960001C2F70 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetGestureConfig - OK - 0xFFFFF960001CD770 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetImeHotKey - OK - 0xFFFFF96000133798 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetImeInfoEx - OK - 0xFFFFF96000150BC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetImeOwnerWindow - OK - 0xFFFFF960001C7080 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetInternalWindowPos - OK - 0xFFFFF960001BAE68 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetLayeredWindowAttributes - OK - 0xFFFFF960001C81CC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenu - OK - 0xFFFFF960001BDF7C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenuContextHelpId - OK - 0xFFFFF960001BC200 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetMenuFlagRtoL - OK - 0xFFFFF960001BC260 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetMirrorRendering - OK - 0xFFFFF960001BF8FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetObjectInformation - OK - 0xFFFFF960001B7E9C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetProcessDPIAware - OK - 0xFFFFF960001CA7BC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetShellWindowEx - OK - 0xFFFFF960001B9414 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetSysColors - OK - 0xFFFFF960001BE214 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetSystemCursor - OK - 0xFFFFF960001C04D8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetSystemTimer - OK - 0xFFFFF960001C1888 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetThreadLayoutHandles - OK - 0xFFFFF960001C7184 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowCompositionAttribute - OK - 0xFFFFF960001CB280 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowDisplayAffinity - OK - 0xFFFFF960001BB9F0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowRgnEx - OK - 0xFFFFF960001BFB2C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowStationUser - OK - 0xFFFFF96000132A5C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDestroyLogicalSurfaceBinding - OK - 0xFFFFF960001C9B48 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxBindSwapChain - OK - 0xFFFFF960001C9C04 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxGetSwapChainStats - OK - 0xFFFFF960001CA3A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxOpenSwapChain - OK - 0xFFFFF960001C9E54 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxQuerySwapChainBindingStatus - OK - 0xFFFFF960001CA14C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxReleaseSwapChain - OK - 0xFFFFF960001CA010 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxReportPendingBindingsToDwm - OK - 0xFFFFF960001CA1F8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxSetSwapChainBindingStatus - OK - 0xFFFFF960001CA0E8 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmDxSetSwapChainStats - OK - 0xFFFFF960001CA304 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSfmGetLogicalSurfaceBinding - OK - 0xFFFFF960001C999C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserShowSystemCursor - OK - 0xFFFFF960001BF9C0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSoundSentry - OK - 0xFFFFF960001C0CC0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSwitchDesktop - OK - 0xFFFFF9600011B8A4 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserTestForInteractiveUser - OK - 0xFFFFF960001C0CFC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserTrackPopupMenuEx - OK - 0xFFFFF960001BE8B0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnloadKeyboardLayout - OK - 0xFFFFF960001C1660 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnlockWindowStation - OK - 0xFFFFF960001C0438 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterHotKey - ssdt hook - 0xFFFFF960001BED66 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterSessionPort - OK - 0xFFFFF960001C8FE0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUnregisterUserApiHook - OK - 0xFFFFF960001BA4FC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateInputContext - OK - 0xFFFFF9600015423C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateInstance - OK - 0xFFFFF960001B9764 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateLayeredWindow - OK - 0xFFFFF960001C7D8C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUpdatePerUserSystemParameters - OK - 0xFFFFF960001230EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUpdateWindowTransform - OK - 0xFFFFF960001C7B40 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserUserHandleGrantAccess - OK - 0xFFFFF960001C10E0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserValidateHandleSecure - OK - 0xFFFFF960001655D0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserWaitForInputIdle - OK - 0xFFFFF960001BEF1C - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserWaitForMsgAndEvent - OK - 0xFFFFF960001B8570 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserWindowFromPhysicalPoint - OK - 0xFFFFF960001BF070 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserYieldTask - OK - 0xFFFFF960001C01EC - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetClassLongPtr - OK - 0xFFFFF960001B8DE0 - C:\Windows\System32\win32k.sys - Microsoft Corporation
       NtUserSetWindowLongPtr - OK - 0xFFFFF96000193C18 - C:\Windows\System32\win32k.sys - Microsoft Corporation

==========================================================================================

FSD

       (Ntfs)IRP_MJ_CREATE - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       (Ntfs)IRP_MJ_CLOSE - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_READ - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_WRITE - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_QUERY_INFORMATION - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_SET_INFORMATION - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_QUERY_EA - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_SET_EA - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_FLUSH_BUFFERS - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_QUERY_VOLUME_INFORMATION - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_SET_VOLUME_INFORMATION - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_DIRECTORY_CONTROL - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_FILE_SYSTEM_CONTROL - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_DEVICE_CONTROL - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       (Ntfs)IRP_MJ_SHUTDOWN - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_LOCK_CONTROL - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_CLEANUP - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       (Ntfs)IRP_MJ_QUERY_SECURITY - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_SET_SECURITY - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_POWER - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       (Ntfs)IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       (Ntfs)IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       (Ntfs)IRP_MJ_QUERY_QUOTA - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_SET_QUOTA - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 
       (Ntfs)IRP_MJ_PNP_POWER - fsd hook - 0xFFFFFA8005E552C0 - unknown image - 

==========================================================================================

Keyboard

       IRP_MJ_CREATE - OK - 0xFFFFF88005201DD4 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF8800520217C - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF88005202804 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF88005201CE0 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF88005208A40 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF880052082B4 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF88005201AFC - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF88005209FD4 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF8800520A364 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF88005203368 - C:\Windows\system32\drivers\kbdclass.sys - Microsoft Corporation

==========================================================================================

Mouclass

       IRP_MJ_CREATE - OK - 0xFFFFF880050C8CA0 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF880050C9038 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF880050C96CC - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF880050C8BAC - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF880050CF940 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF880050CF2B4 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF880050C8AFC - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF880050D0D14 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF880050D10A4 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF880050CA1B4 - C:\Windows\system32\drivers\mouclass.sys - Microsoft Corporation

==========================================================================================

Classpnp

       IRP_MJ_CREATE - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF88001A019E0 - C:\Windows\system32\DRIVERS\CLASSPNP.SYS - Microsoft Corporation

==========================================================================================

Atapi

       IRP_MJ_CREATE - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 
       IRP_MJ_READ - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 
       IRP_MJ_INTERNAL_DEVICE_CONTROL - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 
       IRP_MJ_SYSTEM_CONTROL - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - atapi hook - 0xFFFFFA80054CB2C0 - unknown image - 

==========================================================================================

Acpi

       IRP_MJ_CREATE - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF8800100B914 - C:\Windows\system32\drivers\ACPI.sys - Microsoft Corporation

==========================================================================================

Scsi

       Nothing

==========================================================================================

Kernel Hook

       Inline - len(12) DllUnload[PCIIDEX.SYS] - [0xFFFFF880019EEA50]->[-]
       Iat - ataport.SYS:AtaPortReadPortBufferUshort[atapi.sys<=>0xFFFFF880019FA040] - [0xFFFFF88000E75CE0]->[0xFFFFF880010A9F1C][C:\Windows\System32\Drivers\sptd.sys]
       Iat - ataport.SYS:AtaPortReadPortUchar[atapi.sys<=>0xFFFFF880019FA070] - [0xFFFFF88000E75CA0]->[0xFFFFF880010A9CC0][C:\Windows\System32\Drivers\sptd.sys]
       Iat - ataport.SYS:AtaPortWritePortUchar[atapi.sys<=>0xFFFFF880019FA080] - [0xFFFFF88000E75DB8]->[0xFFFFF880010AA69C][C:\Windows\System32\Drivers\sptd.sys]
       Iat - ataport.SYS:AtaPortWritePortUlong[atapi.sys<=>0xFFFFF880019FA098] - [0xFFFFF88000E75DD8]->[0xFFFFF880010AAA98][C:\Windows\System32\Drivers\sptd.sys]
       Iat - ataport.SYS:AtaPortWritePortBufferUshort[atapi.sys<=>0xFFFFF880019FA0A0] - [0xFFFFF88000E75E04]->[0xFFFFF880010AA8F4][C:\Windows\System32\Drivers\sptd.sys]
       Inline - len(12) DllUnload[ataport.SYS] - [0xFFFFF88000E8C4A0]->[-]
       Inline - len(12) DllUnload[USBPORT.SYS] - [0xFFFFF88005067D64]->[-]
       Inline - len(8) EngAcquireFastMutex[win32k.sys] - [0xFFFFF9600026C538]->[-]
       Inline - len(8) EngGetPrinterDataFileName[win32k.sys] - [0xFFFFF960002AE7F8]->[-]
       Inline - len(8) EngLoadModuleForWrite[win32k.sys] - [0xFFFFF960002AE118]->[-]
       Inline - len(8) EngQueryPerformanceFrequency[win32k.sys] - [0xFFFFF9600026CE08]->[-]
       Inline - len(8) EngReleaseFastMutex[win32k.sys] - [0xFFFFF9600026C538]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960000F5A88]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960000F7768]->[-]
       Inline - len(7) [win32k.sys] - [0xFFFFF960000F7EE9]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960000F93E8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF96000115868]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960001423A8]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF9600015F6D2]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF9600015F98E]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF96000165CEA]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF96000191B32]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001B2716]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001B5E5E]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001B77BE]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BA29A]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BB6C6]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BC72A]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BD8AA]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BE0CE]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BED66]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001BEF76]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001C19C2]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001C1E9A]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001C3DFE]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001C3F7A]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960001C8AAE]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600026B578]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600026B878]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600026BA88]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600026C8D8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600026CF28]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF9600027291A]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF96000274448]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF96000278D98]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600027CFC8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600027D8C8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF96000297878]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960002978D8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF9600029B4F8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960002AE7E8]->[-]
       Inline - len(8) [win32k.sys] - [0xFFFFF960002BB5E8]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960002C5BC2]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960002D294A]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960002DD422]->[-]
       Inline - len(6) [win32k.sys] - [0xFFFFF960002DE33A]->[-]
       Inline - len(47) [spsys.sys] - [0xFFFFF88008A0C000]->[-]
       Inline - len(30) [spsys.sys] - [0xFFFFF88008A433C8]->[-]
       Inline - len(39) [spsys.sys] - [0xFFFFF88008A58ECC]->[-]

==========================================================================================

PTE HOOK

       Nothing

==========================================================================================

Object Type

       CmpCloseKeyObject - CmpKeyObjectType - OK - 0xFFFFF800035A5A60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpDeleteKeyObject - CmpKeyObjectType - OK - 0xFFFFF800035A3C90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpParseKey - CmpKeyObjectType - OK - 0xFFFFF8000359D430 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpSecurityMethod - CmpKeyObjectType - OK - 0xFFFFF8000356B900 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpQueryKeyName - CmpKeyObjectType - OK - 0xFFFFF80003592634 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopCloseFile - IoFileObjectType - OK - 0xFFFFF800035DC4E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteFile - IoFileObjectType - OK - 0xFFFFF800035D04B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopParseFile - IoFileObjectType - OK - 0xFFFFF800035F73B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopGetSetSecurityObject - IoFileObjectType - OK - 0xFFFFF800035B32C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopQueryName - IoFileObjectType - OK - 0xFFFFF800035B35A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteDriver - IoDriverObjectType - OK - 0xFFFFF8000374E500 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IoDriverObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteDevice - IoDeviceObjectType - OK - 0xFFFFF800035408B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopParseDevice - IoDeviceObjectType - OK - 0xFFFFF800035D1C30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopGetSetSecurityObject - IoDeviceObjectType - OK - 0xFFFFF800035B32C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopCloseIoCompletion - IoCompletionObjectType - OK - 0xFFFFF8000358A350 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IopDeleteIoCompletion - IoCompletionObjectType - OK - 0xFFFFF8000358ADB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IoCompletionObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspJobClose - PsJobType - OK - 0xFFFFF8000371EF10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspJobDelete - PsJobType - OK - 0xFFFFF800037159A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PsJobType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspThreadOpen - PsThreadType - OK - 0xFFFFF800035BFF1C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspThreadDelete - PsThreadType - OK - 0xFFFFF800035A89B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PsThreadType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspProcessOpen - PsProcessType - OK - 0xFFFFF800035A62BC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspProcessClose - PsProcessType - OK - 0xFFFFF8000358D600 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PspProcessDelete - PsProcessType - OK - 0xFFFFF8000358C8C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PsProcessType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ObpTypeObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       ObpCloseDirectoryObject - ObpDirectoryObjectType - OK - 0xFFFFF8000357A6B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ObpDirectoryObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       MiSectionDelete - MmSectionObjectType - OK - 0xFFFFF800035F13D8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - MmSectionObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ExEventObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       ExpDeleteMutant - ExMutantObjectType - OK - 0xFFFFF8000329B2C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ExMutantObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - ExSemaphoreObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SepTokenDeleteMethod - SeTokenObjectType - OK - 0xFFFFF8000359B840 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - SeTokenObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       AlpcpOpenPort - AlpcPortObjectType - OK - 0xFFFFF800035B1A00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       AlpcpClosePort - AlpcPortObjectType - OK - 0xFFFFF80003579358 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       AlpcpDeletePort - AlpcPortObjectType - OK - 0xFFFFF80003577E9C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - AlpcPortObjectType - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - TmTm - OK - 0xFFFFF8000355EEC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TmTm - OK - 0xFFFFF8000355EED0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - TmTm - OK - 0xFFFFF8000355F75C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - TmTm - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - Desktop - OK - 0xFFFFF8000357B6D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - Desktop - OK - 0xFFFFF8000358D810 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Desktop - OK - 0xFFFFF8000366DB40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Desktop - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OkayToCloseProcedure - Desktop - OK - 0xFFFFF8000358D340 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - DebugObject - OK - 0xFFFFF800036FD9D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - DebugObject - OK - 0xFFFFF80003553440 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - DebugObject - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TpWorkerFactory - OK - 0xFFFFF8000358A150 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - TpWorkerFactory - OK - 0xFFFFF8000329F340 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - TpWorkerFactory - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Adapter - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - EventPair - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - PcwObject - OK - 0xFFFFF88001D88298 - C:\Windows\System32\drivers\pcw.sys - Microsoft Corporation
       CloseProcedure - PcwObject - OK - 0xFFFFF88001D882A8 - C:\Windows\System32\drivers\pcw.sys - Microsoft Corporation
       DeleteProcedure - PcwObject - OK - 0xFFFFF88001D882CC - C:\Windows\System32\drivers\pcw.sys - Microsoft Corporation
       SeDefaultObjectMethod - PcwObject - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - WmiGuid - OK - 0xFFFFF8000328B240 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - WmiGuid - OK - 0xFFFFF8000356DAFC - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - EtwRegistration - OK - 0xFFFFF8000357A6A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - EtwRegistration - OK - 0xFFFFF8000358BEC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - EtwRegistration - OK - 0xFFFFF8000358BD5C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - EtwRegistration - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Session - OK - 0xFFFFF8000366E150 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Session - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Timer - OK - 0xFFFFF8000327D99C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Timer - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - WindowStation - OK - 0xFFFFF8000357B6D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - WindowStation - OK - 0xFFFFF8000358D810 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - WindowStation - OK - 0xFFFFF8000366DB40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       ParseProcedure - WindowStation - OK - 0xFFFFF80003581A30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - WindowStation - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OkayToCloseProcedure - WindowStation - OK - 0xFFFFF8000358D340 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Profile - OK - 0xFFFFF80003701F20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Profile - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - EtwConsumer - OK - 0xFFFFF8000357A6A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - EtwConsumer - OK - 0xFFFFF80003666B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - EtwConsumer - OK - 0xFFFFF800036CDC70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - EtwConsumer - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - SymbolicLink - OK - 0xFFFFF8000356D290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       ParseProcedure - SymbolicLink - OK - 0xFFFFF800035DCB80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - SymbolicLink - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TmTx - OK - 0xFFFFF800035589B8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - TmTx - OK - 0xFFFFF8000355CAC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - TmTx - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - FilterConnectionPort - OK - 0xFFFFF88000DB4930 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       DeleteProcedure - FilterConnectionPort - OK - 0xFFFFF88000DB4920 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       SeDefaultObjectMethod - FilterConnectionPort - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - KeyedEvent - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - Callback - OK - 0xFFFFF800035EA6A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Callback - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - UserApcReserve - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - Controller - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - IoCompletionReserve - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TmEn - OK - 0xFFFFF8000355EF80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - TmEn - OK - 0xFFFFF80003558E90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - TmEn - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - FilterCommunicationPort - OK - 0xFFFFF88000DB2260 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       DeleteProcedure - FilterCommunicationPort - OK - 0xFFFFF88000DAFCF0 - C:\Windows\system32\drivers\fltmgr.sys - Microsoft Corporation
       SeDefaultObjectMethod - FilterCommunicationPort - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - PowerRequest - OK - 0xFFFFF8000368ABB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - PowerRequest - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       OpenProcedure - TmRm - OK - 0xFFFFF8000355F57C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CloseProcedure - TmRm - OK - 0xFFFFF800035637C8 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       DeleteProcedure - TmRm - OK - 0xFFFFF80003562008 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SeDefaultObjectMethod - TmRm - OK - 0xFFFFF800035BE290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       PostOperation - Process - ObjectType_Callback - 0xFFFFF88004491064 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       PreOperation - Process - ObjectType_Callback - 0xFFFFF88004490AA0 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       PostOperation - Thread - ObjectType_Callback - 0xFFFFF88004491064 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       PreOperation - Thread - ObjectType_Callback - 0xFFFFF88004490AA0 - C:\Windows\system32\DRIVERS\klif.sys - Kaspersky Lab
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       GetCellRoutine - HHIVE - OK - 0xFFFFF800035A3960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpAllocate - HHIVE - OK - 0xFFFFF80003571530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFree - HHIVE - OK - 0xFFFFF80003571590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileSetSize - HHIVE - OK - 0xFFFFF80003549714 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileWrite - HHIVE - OK - 0xFFFFF80003574530 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileRead - HHIVE - OK - 0xFFFFF8000354BD3C - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       CmpFileFlush - HHIVE - OK - 0xFFFFF80003573C68 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

IDT

       Divide error - 0x02 - OK - 0xFFFFF800032CD9C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Debug - 0x02 - OK - 0xFFFFF800032CDAC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF800032CDC80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Breakpoint - 0x02 - OK - 0xFFFFF800032CE000 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Overflow - 0x02 - OK - 0xFFFFF800032CE100 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Bounds check - 0x02 - OK - 0xFFFFF800032CE200 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid opcode - 0x02 - OK - 0xFFFFF800032CE300 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Device not available - 0x02 - OK - 0xFFFFF800032CE540 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Double fault - 0x02 - OK - 0xFFFFF800032CE600 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Coprocessor segment overrun - 0x02 - OK - 0xFFFFF800032CE6C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Invalid TSS - 0x02 - OK - 0xFFFFF800032CE780 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Segment not present - 0x02 - OK - 0xFFFFF800032CE840 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Stack segment fault - 0x02 - OK - 0xFFFFF800032CE980 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       General protection - 0x02 - OK - 0xFFFFF800032CEAC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Page Fault - 0x02 - OK - 0xFFFFF800032CEC00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800034070F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Floating-point error - 0x02 - OK - 0xFFFFF800032CEFC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Alignment check - 0x02 - OK - 0xFFFFF800032CF140 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Machine check - 0x02 - OK - 0xFFFFF800032CF240 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       SIMD floating point exception - 0x02 - OK - 0xFFFFF800032CF5C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF80003407140 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF80003407150 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF80003407160 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF80003407170 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF80003407180 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF80003407190 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800034071A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800034071B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800034071C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800034071D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800034071E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved by Intel - 0x02 - OK - 0xFFFFF800032C3830 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407200 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407210 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407220 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407230 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407240 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407250 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407260 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407270 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407280 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Not used - 0x02 - OK - 0xFFFFF80003407290 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiGetTickCount - 0x02 - OK - 0xFFFFF800034072A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiCallbackReturn - 0x02 - OK - 0xFFFFF800034072B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiSetLowWaitHighThread - 0x02 - OK - 0xFFFFF800032CF780 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiDebugService - 0x02 - OK - 0xFFFFF800032CF880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiSystemService - 0x02 - OK - 0xFFFFF800034072E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       Reserved for APIC - 0x02 - OK - 0xFFFFF8000331BA10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiStartUnexpectedRange - 0x02 - OK - 0xFFFFF80003407300 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt1 - 0x02 - OK - 0xFFFFF80003407310 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt2 - 0x02 - OK - 0xFFFFF80003407320 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt3 - 0x02 - OK - 0xFFFFF80003407330 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt4 - 0x02 - OK - 0xFFFFF80003407340 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt5 - 0x02 - OK - 0xFFFFF80003407350 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt6 - 0x02 - OK - 0xFFFFF80003407360 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt7 - 0x02 - idt hook - 0xFFFFFA80054F71D0 - unknown image - 
       KiUnexpectedInterrupt8 - 0x02 - OK - 0xFFFFF80003407380 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt9 - 0x02 - OK - 0xFFFFF80003407390 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt10 - 0x02 - OK - 0xFFFFF800034073A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt11 - 0x02 - OK - 0xFFFFF800034073B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt12 - 0x02 - OK - 0xFFFFF800034073C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt13 - 0x02 - OK - 0xFFFFF800034073D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt14 - 0x02 - OK - 0xFFFFF800034073E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt15 - 0x02 - idt hook - 0xFFFFFA80054F7270 - unknown image - 
       KiUnexpectedInterrupt16 - 0x02 - OK - 0xFFFFF80003407400 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt17 - 0x02 - OK - 0xFFFFF80003407410 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt18 - 0x02 - OK - 0xFFFFF80003407420 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt19 - 0x02 - OK - 0xFFFFF80003407430 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt20 - 0x02 - OK - 0xFFFFF80003407440 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt21 - 0x02 - OK - 0xFFFFF80003407450 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt22 - 0x02 - OK - 0xFFFFF80003407460 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt23 - 0x02 - OK - 0xFFFFF80003407470 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt24 - 0x02 - OK - 0xFFFFF80003407480 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt25 - 0x02 - OK - 0xFFFFF80003407490 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt26 - 0x02 - OK - 0xFFFFF800034074A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt27 - 0x02 - OK - 0xFFFFF800034074B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt28 - 0x02 - OK - 0xFFFFF800034074C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt29 - 0x02 - OK - 0xFFFFF800034074D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt30 - 0x02 - OK - 0xFFFFF800034074E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt31 - 0x02 - OK - 0xFFFFF800034074F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt32 - 0x02 - idt hook - 0xFFFFFA80054F73B0 - unknown image - 
       KiUnexpectedInterrupt33 - 0x02 - OK - 0xFFFFF80003407510 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt34 - 0x02 - idt hook - 0xFFFFFA80065C0210 - unknown image - 
       KiUnexpectedInterrupt35 - 0x02 - idt hook - 0xFFFFFA80065C0690 - unknown image - 
       KiUnexpectedInterrupt36 - 0x02 - OK - 0xFFFFF80003407540 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt37 - 0x02 - OK - 0xFFFFF80003407550 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt38 - 0x02 - OK - 0xFFFFF80003407560 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt39 - 0x02 - OK - 0xFFFFF80003407570 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt40 - 0x02 - OK - 0xFFFFF80003407580 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt41 - 0x02 - OK - 0xFFFFF80003407590 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt42 - 0x02 - OK - 0xFFFFF800034075A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt43 - 0x02 - OK - 0xFFFFF800034075B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt44 - 0x02 - OK - 0xFFFFF800034075C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt45 - 0x02 - OK - 0xFFFFF800034075D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt46 - 0x02 - OK - 0xFFFFF800034075E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt47 - 0x02 - OK - 0xFFFFF800034075F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt48 - 0x02 - OK - 0xFFFFF80003407600 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt49 - 0x02 - OK - 0xFFFFF80003407610 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt50 - 0x02 - idt hook - 0xFFFFFA8007633ED0 - unknown image - 
       KiUnexpectedInterrupt51 - 0x02 - idt hook - 0xFFFFFA80065C0750 - unknown image - 
       KiUnexpectedInterrupt52 - 0x02 - OK - 0xFFFFF80003407640 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt53 - 0x02 - OK - 0xFFFFF80003407650 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt54 - 0x02 - OK - 0xFFFFF80003407660 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt55 - 0x02 - OK - 0xFFFFF80003407670 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt56 - 0x02 - OK - 0xFFFFF80003407680 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt57 - 0x02 - OK - 0xFFFFF80003407690 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt58 - 0x02 - OK - 0xFFFFF800034076A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt59 - 0x02 - OK - 0xFFFFF800034076B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt60 - 0x02 - OK - 0xFFFFF800034076C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt61 - 0x02 - OK - 0xFFFFF800034076D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt62 - 0x02 - OK - 0xFFFFF800034076E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt63 - 0x02 - OK - 0xFFFFF800034076F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt64 - 0x02 - OK - 0xFFFFF80003407700 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt65 - 0x02 - OK - 0xFFFFF80003407710 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt66 - 0x02 - idt hook - 0xFFFFFA80065C0E10 - unknown image - 
       KiUnexpectedInterrupt67 - 0x02 - idt hook - 0xFFFFFA80065C0390 - unknown image - 
       KiUnexpectedInterrupt68 - 0x02 - OK - 0xFFFFF80003407740 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt69 - 0x02 - OK - 0xFFFFF80003407750 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt70 - 0x02 - OK - 0xFFFFF80003407760 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt71 - 0x02 - OK - 0xFFFFF80003407770 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt72 - 0x02 - OK - 0xFFFFF80003407780 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt73 - 0x02 - OK - 0xFFFFF80003407790 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt74 - 0x02 - OK - 0xFFFFF800034077A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt75 - 0x02 - OK - 0xFFFFF800034077B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt76 - 0x02 - OK - 0xFFFFF800034077C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt77 - 0x02 - OK - 0xFFFFF800034077D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt78 - 0x02 - OK - 0xFFFFF800034077E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt79 - 0x02 - OK - 0xFFFFF800034077F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt80 - 0x02 - idt hook - 0xFFFFFA80065C0810 - unknown image - 
       KiUnexpectedInterrupt81 - 0x02 - OK - 0xFFFFF80003407810 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt82 - 0x02 - idt hook - 0xFFFFFA80065C0A50 - unknown image - 
       KiUnexpectedInterrupt83 - 0x02 - idt hook - 0xFFFFFA80065C02D0 - unknown image - 
       KiUnexpectedInterrupt84 - 0x02 - idt hook - 0xFFFFFA80065C0450 - unknown image - 
       KiUnexpectedInterrupt85 - 0x02 - OK - 0xFFFFF80003407850 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt86 - 0x02 - OK - 0xFFFFF80003407860 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt87 - 0x02 - OK - 0xFFFFF80003407870 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt88 - 0x02 - OK - 0xFFFFF80003407880 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt89 - 0x02 - OK - 0xFFFFF80003407890 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt90 - 0x02 - OK - 0xFFFFF800034078A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt91 - 0x02 - OK - 0xFFFFF800034078B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt92 - 0x02 - OK - 0xFFFFF800034078C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt93 - 0x02 - OK - 0xFFFFF800034078D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt94 - 0x02 - OK - 0xFFFFF800034078E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt95 - 0x02 - OK - 0xFFFFF800034078F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt96 - 0x02 - idt hook - 0xFFFFFA80065C08D0 - unknown image - 
       KiUnexpectedInterrupt97 - 0x02 - OK - 0xFFFFF80003407910 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt98 - 0x02 - OK - 0xFFFFF80003407920 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt99 - 0x02 - OK - 0xFFFFF80003407930 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt100 - 0x02 - idt hook - 0xFFFFFA8007633A50 - unknown image - 
       KiUnexpectedInterrupt101 - 0x02 - OK - 0xFFFFF80003407950 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt102 - 0x02 - OK - 0xFFFFF80003407960 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt103 - 0x02 - OK - 0xFFFFF80003407970 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt104 - 0x02 - OK - 0xFFFFF80003407980 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt105 - 0x02 - OK - 0xFFFFF80003407990 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt106 - 0x02 - OK - 0xFFFFF800034079A0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt107 - 0x02 - OK - 0xFFFFF800034079B0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt108 - 0x02 - OK - 0xFFFFF800034079C0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt109 - 0x02 - OK - 0xFFFFF800034079D0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt110 - 0x02 - OK - 0xFFFFF800034079E0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt111 - 0x02 - OK - 0xFFFFF800034079F0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt112 - 0x02 - idt hook - 0xFFFFFA80065C0990 - unknown image - 
       KiUnexpectedInterrupt113 - 0x02 - OK - 0xFFFFF80003407A10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt114 - 0x02 - idt hook - 0xFFFFFA80065C0150 - unknown image - 
       KiUnexpectedInterrupt115 - 0x02 - idt hook - 0xFFFFFA80065C0090 - unknown image - 
       KiUnexpectedInterrupt116 - 0x02 - idt hook - 0xFFFFFA80065C0510 - unknown image - 
       KiUnexpectedInterrupt117 - 0x02 - OK - 0xFFFFF80003407A50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt118 - 0x02 - OK - 0xFFFFF80003407A60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt119 - 0x02 - OK - 0xFFFFF80003407A70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt120 - 0x02 - OK - 0xFFFFF80003407A80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt121 - 0x02 - OK - 0xFFFFF80003407A90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt122 - 0x02 - OK - 0xFFFFF80003407AA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt123 - 0x02 - OK - 0xFFFFF80003407AB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt124 - 0x02 - OK - 0xFFFFF80003407AC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt125 - 0x02 - OK - 0xFFFFF80003407AD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt126 - 0x02 - OK - 0xFFFFF80003407AE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt127 - 0x02 - OK - 0xFFFFF80003407AF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt128 - 0x02 - idt hook - 0xFFFFFA80065C0B10 - unknown image - 
       KiUnexpectedInterrupt129 - 0x02 - idt hook - 0xFFFFFA80065C0F90 - unknown image - 
       KiUnexpectedInterrupt130 - 0x02 - OK - 0xFFFFF80003407B20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt131 - 0x02 - OK - 0xFFFFF80003407B30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt132 - 0x02 - idt hook - 0xFFFFFA80065C05D0 - unknown image - 
       KiUnexpectedInterrupt133 - 0x02 - OK - 0xFFFFF80003407B50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt134 - 0x02 - OK - 0xFFFFF80003407B60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt135 - 0x02 - OK - 0xFFFFF80003407B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt136 - 0x02 - OK - 0xFFFFF80003407B80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt137 - 0x02 - OK - 0xFFFFF80003407B90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt138 - 0x02 - OK - 0xFFFFF80003407BA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt139 - 0x02 - OK - 0xFFFFF80003407BB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt140 - 0x02 - OK - 0xFFFFF80003407BC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt141 - 0x02 - OK - 0xFFFFF80003407BD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt142 - 0x02 - OK - 0xFFFFF80003407BE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt143 - 0x02 - OK - 0xFFFFF80003407BF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt144 - 0x02 - OK - 0xFFFFF80003407C00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt145 - 0x02 - OK - 0xFFFFF80003242450 - C:\Windows\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt146 - 0x02 - OK - 0xFFFFF80003407C20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt147 - 0x02 - OK - 0xFFFFF80003407C30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt148 - 0x02 - OK - 0xFFFFF80003407C40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt149 - 0x02 - OK - 0xFFFFF80003407C50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt150 - 0x02 - OK - 0xFFFFF80003407C60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt151 - 0x02 - OK - 0xFFFFF80003407C70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt152 - 0x02 - OK - 0xFFFFF80003407C80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt153 - 0x02 - OK - 0xFFFFF80003407C90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt154 - 0x02 - OK - 0xFFFFF80003407CA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt155 - 0x02 - OK - 0xFFFFF80003407CB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt156 - 0x02 - OK - 0xFFFFF80003407CC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt157 - 0x02 - OK - 0xFFFFF80003407CD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt158 - 0x02 - OK - 0xFFFFF80003407CE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt159 - 0x02 - OK - 0xFFFFF80003407CF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt160 - 0x02 - OK - 0xFFFFF80003407D00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt161 - 0x02 - OK - 0xFFFFF800032DBF10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt162 - 0x02 - OK - 0xFFFFF80003242590 - C:\Windows\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt163 - 0x02 - OK - 0xFFFFF80003407D30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt164 - 0x02 - OK - 0xFFFFF80003407D40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt165 - 0x02 - OK - 0xFFFFF80003407D50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt166 - 0x02 - OK - 0xFFFFF80003407D60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt167 - 0x02 - OK - 0xFFFFF80003407D70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt168 - 0x02 - OK - 0xFFFFF80003407D80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt169 - 0x02 - OK - 0xFFFFF80003407D90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt170 - 0x02 - OK - 0xFFFFF80003407DA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt171 - 0x02 - OK - 0xFFFFF80003407DB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt172 - 0x02 - OK - 0xFFFFF80003407DC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt173 - 0x02 - OK - 0xFFFFF80003407DD0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt174 - 0x02 - OK - 0xFFFFF80003407DE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt175 - 0x02 - OK - 0xFFFFF800032423B0 - C:\Windows\system32\hal.dll - Microsoft Corporation
       KiUnexpectedInterrupt176 - 0x02 - OK - 0xFFFFF80003407E00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt177 - 0x02 - OK - 0xFFFFF800032DAA60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt178 - 0x02 - idt hook - 0xFFFFFA80054F7450 - unknown image - 
       KiUnexpectedInterrupt179 - 0x02 - idt hook - 0xFFFFFA80054F7310 - unknown image - 
       KiUnexpectedInterrupt180 - 0x02 - OK - 0xFFFFF80003407E40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt181 - 0x02 - OK - 0xFFFFF80003407E50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt182 - 0x02 - OK - 0xFFFFF80003407E60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt183 - 0x02 - OK - 0xFFFFF80003407E70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt184 - 0x02 - OK - 0xFFFFF80003407E80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt185 - 0x02 - OK - 0xFFFFF80003407E90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt186 - 0x02 - OK - 0xFFFFF80003407EA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt187 - 0x02 - OK - 0xFFFFF80003407EB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt188 - 0x02 - OK - 0xFFFFF80003407EC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt189 - 0x02 - OK - 0xFFFFF80003407ED0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt190 - 0x02 - OK - 0xFFFFF80003407EE0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt191 - 0x02 - OK - 0xFFFFF80003407EF0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt192 - 0x02 - OK - 0xFFFFF80003407F00 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt193 - 0x02 - OK - 0xFFFFF80003407F10 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt194 - 0x02 - OK - 0xFFFFF80003407F20 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt195 - 0x02 - OK - 0xFFFFF80003407F30 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt196 - 0x02 - OK - 0xFFFFF80003407F40 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt197 - 0x02 - OK - 0xFFFFF80003407F50 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt198 - 0x02 - OK - 0xFFFFF80003407F60 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt199 - 0x02 - OK - 0xFFFFF80003407F70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt200 - 0x02 - OK - 0xFFFFF80003407F80 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt201 - 0x02 - OK - 0xFFFFF80003407F90 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt202 - 0x02 - OK - 0xFFFFF80003407FA0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt203 - 0x02 - OK - 0xFFFFF80003407FB0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt204 - 0x02 - OK - 0xFFFFF80003407FC0 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       KiUnexpectedInterrupt205 - 0x02 - idt hook - 0xFFFFFA80054F74F0 - unknown image - 
       KiUnexpectedInterrupt206 - 0x02 - idt hook - 0xFFFFFA80054F7590 - unknown image - 
       KiUnexpectedInterrupt207 - 0x00 - OK - 0x0000000000000000 - - - 

==========================================================================================

Message Hook

       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - WH_CBT - SearchProtocolHost.exe
       RaUI.exe - C:\Program Files (x86)\EDIMAX\Common\RaUI.exe - WH_MSGFILTER - RaUI.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_CBT - RAVCpl64.exe
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - WH_CBT - SearchProtocolHost.exe
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - WH_CBT - SearchProtocolHost.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RAVCpl64.exe - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - WH_MSGFILTER - RAVCpl64.exe
       RaUI.exe - C:\Program Files (x86)\EDIMAX\Common\RaUI.exe - WH_CBT - RaUI.exe
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - WH_CBT - SearchProtocolHost.exe
       nvtray.exe - C:\Program Files\NVIDIA Corporation\Display\nvtray.exe - WH_MSGFILTER - nvtray.exe
       avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - WH_GETMESSAGE - avp.exe
       avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - WH_GETMESSAGE - avp.exe
       avp.exe - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - WH_CALLWNDPROC - avp.exe
       SearchProtocolHost.exe - C:\Windows\System32\SearchProtocolHost.exe - WH_CBT - SearchProtocolHost.exe
       PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - WH_CBT - PCHunter64.exe
       PCHunter64.exe - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe - WH_MSGFILTER - PCHunter64.exe

==========================================================================================

Process Hook

      Image File Name[764 lsm.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1008 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[468 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3456 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[4540 PCHunter64.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[700 csrss.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[412 smss.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[420 winlogon.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[964 nvSCPAPISvr.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3600 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2028 explorer.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[588 csrss.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[668 wininit.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1224 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2416 avp.exe]Process Hook
             Iat - avp.exe->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0010
             Iat - avp.exe->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF007C
             Iat - avp.exe->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF00E8
             Iat - avp.exe->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFF0C4C
             Iat - avp.exe->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE06D0
             Iat - avp.exe->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFF0CB8
             Iat - avp.exe->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0D24
             Iat - avp.exe->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE073C
             Iat - avp.exe->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFF0D90
             Iat - avp.exe->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0154
             Iat - avp.exe->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF01C0
             Iat - avp.exe->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE07A8
             Iat - avp.exe->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFF0DFC
             C:\Windows\syswow64\KERNELBASE.dll - Hijack on Module File
             Iat - ushata.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFE04B4
             Iat - ushata.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0A9C
             Iat - ushata.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE0520
             Iat - ushata.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFE058C
             Iat - ushata.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0B08
             Iat - ushata.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF09C4
             Iat - ushata.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0A30
             Iat - ushata.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0A9C
             Iat - ushata.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE05F8
             Iat - ushata.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0664
             Iat - ushata.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0B08
             Iat - ushata.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF0B74
             Iat - ushata.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0BE0
             Iat - fltLib.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - fltLib.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - fltLib.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - USP10.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - USP10.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - USP10.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - USP10.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - USP10.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - USP10.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - USP10.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - USP10.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - USP10.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - USP10.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ADVAPI32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - ADVAPI32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ADVAPI32.dll->ntdll.dll:RtlReAllocateHeap - 0x00000000772524F1->0x000000007DFF0304
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - ADVAPI32.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - ADVAPI32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - ADVAPI32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - ADVAPI32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ADVAPI32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - sechost.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - sechost.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - sechost.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - CRYPTBASE.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - CRYPTBASE.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - MSCTF.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MSCTF.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - MSCTF.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - MSCTF.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - MSCTF.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - MSCTF.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - MSCTF.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avpmain.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - avpmain.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - avpmain.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - avpmain.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avpmain.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - avpmain.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - avpmain.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avpmain.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avpmain.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avpmain.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avpmain.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - avpmain.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - avpmain.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avpmain.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - avpmain.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - POWRPROF.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - POWRPROF.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - POWRPROF.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - POWRPROF.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - POWRPROF.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - SETUPAPI.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - SETUPAPI.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - SETUPAPI.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - SETUPAPI.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - SETUPAPI.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - SETUPAPI.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - SETUPAPI.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - SETUPAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - SETUPAPI.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - CFGMGR32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - CFGMGR32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - CFGMGR32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - CFGMGR32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CFGMGR32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CFGMGR32.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - CFGMGR32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - OLEAUT32.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - OLEAUT32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - OLEAUT32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - OLEAUT32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - OLEAUT32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - OLEAUT32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - OLEAUT32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - OLEAUT32.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - OLEAUT32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - OLEAUT32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - OLEAUT32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ole32.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - ole32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - ole32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ole32.dll->ntdll.dll:RtlReAllocateHeap - 0x00000000772524F1->0x000000007DFF0304
             Iat - ole32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - ole32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - DEVOBJ.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DEVOBJ.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - DEVOBJ.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - CRYPT32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - CRYPT32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - CRYPT32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CRYPT32.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - CRYPT32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - CRYPT32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - CRYPT32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CRYPT32.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - CRYPT32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - CRYPT32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - CRYPT32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - CRYPT32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - SHELL32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - SHELL32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - SHELL32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - SHLWAPI.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - SHLWAPI.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - SHLWAPI.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - SHLWAPI.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - SHLWAPI.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - SHLWAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - SHLWAPI.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - SHLWAPI.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - SHLWAPI.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MSVCP100.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MSVCR100.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - MSVCR100.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - MSVCR100.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - MSVCR100.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - MSVCR100.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - MSVCR100.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - MSVCR100.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - MSVCR100.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - MSVCR100.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - MSVCR100.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - MSVCR100.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - MSVCR100.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - MSVCR100.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - MSVCR100.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - MSVCR100.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - Secur32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - Secur32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - Secur32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - Secur32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - Secur32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - Secur32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - Secur32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fssync.DLL->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - fssync.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - fssync.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - fssync.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fssync.DLL->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WINTRUST.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WINTRUST.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - WINTRUST.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINTRUST.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - WINTRUST.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINTRUST.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WINTRUST.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINTRUST.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINTRUST.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINTRUST.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINTRUST.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - DumpWriter.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - DumpWriter.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - DumpWriter.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - DumpWriter.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DumpWriter.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - DumpWriter.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - DumpWriter.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - DumpWriter.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - DumpWriter.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - dwmapi.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - dwmapi.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - dwmapi.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - dwmapi.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - dwmapi.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - dwmapi.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - dwmapi.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - dwmapi.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WTSAPI32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WTSAPI32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WTSAPI32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINSTA.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - WINSTA.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINSTA.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINSTA.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINSTA.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINSTA.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - service.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - service.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - service.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - service.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - service.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - service.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - service.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - service.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - service.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - prremote.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - prremote.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - prremote.DLL->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - prremote.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - prremote.DLL->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - prremote.DLL->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - prremote.DLL->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - prremote.DLL->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - prremote.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - prloader.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - prloader.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - prloader.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - prloader.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - prloader.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - prloader.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - prloader.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - prloader.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - prloader.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - prloader.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - prloader.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - prloader.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - prloader.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - prloader.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - VERSION.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - VERSION.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - VERSION.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - VERSION.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - VERSION.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - VERSION.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - VERSION.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - nfio.ppl->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - nfio.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - nfio.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - nfio.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - nfio.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - nfio.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - nfio.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MPR.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - MPR.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - MPR.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - MPR.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MPR.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - MPR.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - fsdrvplg.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fsdrvplg.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - fsdrvplg.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - fsdrvplg.ppl->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - winreg.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - winreg.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - winreg.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - pxstub.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - params.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - params.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - params.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - app_core_legacy.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - app_core_legacy.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - app_core_legacy.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - app_core_legacy.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - app_core_legacy.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - app_core_legacy.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - app_core_legacy.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - key_value_storage.DLL->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - key_value_storage.DLL->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - key_value_storage.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - key_value_storage.DLL->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - key_value_storage.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - key_value_storage.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - key_value_storage.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - eka_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - eka_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - eka_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - updater_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - updater_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - updater_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - content_filtering_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - content_filtering_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - content_filtering_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - am_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - am_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - am_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ac_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ac_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ac_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - app_core_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - app_core_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - app_core_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - product_metainfo.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - product_metainfo.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - product_metainfo.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - plugins_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - plugins_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - plugins_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ksn_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ksn_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ksn_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ucp_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ucp_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ucp_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klifpp_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - klifpp_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klifpp_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - instrumental_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - instrumental_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - instrumental_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - storage.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - storage.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - storage.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - storage.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - storage.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - storage.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - RpcRtRemote.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - RpcRtRemote.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - avpservice.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avpservice.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avpservice.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - avpservice.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avpservice.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - avpgui.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avpgui.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avpgui.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avpgui.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avpgui.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avpgui.ppl->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - avpgui.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - avpgui.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - avpgui.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avpgui.ppl->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - avpgui.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - QtCore4.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - QtCore4.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - QtCore4.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - QtCore4.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - QtCore4.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - QtCore4.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - QtCore4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WS2_32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WS2_32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - QtDeclarative4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - QtScript4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINMM.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINMM.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINMM.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - WINMM.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - WINMM.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - WINMM.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINMM.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINMM.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINMM.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WINMM.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - QtSql4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - QtGui4.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - QtGui4.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - QtGui4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - QtGui4.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - QtGui4.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - COMDLG32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - COMDLG32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - COMDLG32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - COMDLG32.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - COMDLG32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - COMDLG32.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - COMDLG32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - COMDLG32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - COMDLG32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - COMDLG32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - COMCTL32.dll[WinSxs]->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINSPOOL.DRV->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINSPOOL.DRV->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - WINSPOOL.DRV->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINSPOOL.DRV->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - WINSPOOL.DRV->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WINSPOOL.DRV->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINSPOOL.DRV->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINSPOOL.DRV->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINSPOOL.DRV->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WINSPOOL.DRV->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINSPOOL.DRV->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINSPOOL.DRV->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - QtNetwork4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - QtNetwork4.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - QtNetwork4.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - QtNetwork4.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - QtNetwork4.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - RASAPI32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - RASAPI32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - RASAPI32.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - rasman.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - rasman.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - rasman.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - rasman.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - rasman.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - rasman.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rasman.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WININET.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WININET.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WININET.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WININET.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WININET.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - WININET.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WININET.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WININET.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WININET.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WININET.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - WININET.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - iertutil.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - iertutil.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - iertutil.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - iertutil.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - iertutil.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - iertutil.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - iertutil.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - iertutil.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - iertutil.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - iertutil.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - urlmon.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - urlmon.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - urlmon.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - urlmon.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - urlmon.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - urlmon.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - urlmon.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - urlmon.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - urlmon.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - dblite.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - dblite.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - dblite.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - dblite.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - dblite.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - icuuc40.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINHTTP.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINHTTP.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WINHTTP.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WINHTTP.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - WINHTTP.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINHTTP.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINHTTP.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINHTTP.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINHTTP.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - WINHTTP.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINHTTP.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - webio.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - webio.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - webio.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - webio.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - webio.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - webio.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - webio.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - webio.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - webio.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - webio.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - basegui.ppl->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - basegui.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - basegui.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - basegui.ppl->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - basegui.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - basegui.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - basegui.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - basegui.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - basegui.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - basegui.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - basegui.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - basegui.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - NETAPI32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - NETAPI32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - netutils.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - srvcli.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - srvcli.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - srvcli.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - srvcli.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - srvcli.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wkscli.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - wkscli.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wkscli.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - wkscli.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - wkscli.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - MSIMG32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - thpimpl.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - thpimpl.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - thpimpl.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - thpimpl.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - thpimpl.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - memmon.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - memmon.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - memmon.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - memmon.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - memmon.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - localization_manager.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - localization_manager.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - localization_manager.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CLBCatQ.DLL->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - CLBCatQ.DLL->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - CLBCatQ.DLL->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - CLBCatQ.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CLBCatQ.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - CLBCatQ.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CLBCatQ.DLL->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - CLBCatQ.DLL->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - CLBCatQ.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - CLBCatQ.DLL->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - CLBCatQ.DLL->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - explorerframe.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - explorerframe.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - explorerframe.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - explorerframe.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - explorerframe.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - explorerframe.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - explorerframe.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - explorerframe.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - explorerframe.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - explorerframe.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - explorerframe.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - explorerframe.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - explorerframe.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DUser.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - DUser.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DUser.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - DUser.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - DUser.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - DUser.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - DUser.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - DUser.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - DUser.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - DUI70.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - DUI70.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - DUI70.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DUI70.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - DUI70.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - DUI70.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - DUI70.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - DUI70.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - DUI70.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - DUI70.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - DUI70.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - DUI70.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rsaenh.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - rsaenh.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rsaenh.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - rsaenh.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - rsaenh.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - rsaenh.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - rsaenh.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - rsaenh.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - rsaenh.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - rsaenh.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - parental_control_gui.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - parental_control_gui.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - parental_control_gui.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - hashmd5.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - RICHED20.DLL->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - RICHED20.DLL->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - RICHED20.DLL->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - RICHED20.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - RICHED20.DLL->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - RICHED20.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - propmap.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - qgif4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - qico4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - qjpeg4.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154

------------------------------------------------------------------------------------------

      Image File Name[1316 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[740 services.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[756 lsass.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[808 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[4580 sppsvc.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2260 SearchProtocolHost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[872 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2396 daemonu.exe]Process Hook
             Iat - daemonu.exe->KERNEL32.dll:CreateProcessW - 0x000000007624103D->0x00000000737199C4[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:GetFileAttributesW - 0x0000000076241B18->0x00000000737195B4[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - daemonu.exe->KERNEL32.dll:SetFileAttributesW - 0x000000007625D4DF->0x0000000073721A1E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:GetFileAttributesExW - 0x000000007624455C->0x00000000737197B2[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:CopyFileW - 0x00000000762682F5->0x000000007372136E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - daemonu.exe->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WINHTTP.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WINHTTP.dll->KERNEL32.dll:RegSetValueExW - 0x0000000076245BCD->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WINHTTP.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - webio.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - webio.dll->KERNEL32.dll:RegOpenKeyExW - 0x00000000762422F1->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ADVAPI32.dll->KERNEL32.dll:CopyFileW - 0x00000000762682F5->0x000000007372136E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ADVAPI32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - ADVAPI32.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ADVAPI32.dll->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ADVAPI32.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - USP10.dll->KERNEL32.dll:CreateFileA - 0x00000000762453AE->0x0000000073722D20[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - USP10.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - USP10.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHLWAPI.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHLWAPI.dll->KERNEL32.dll:SetFileAttributesW - 0x000000007625D4DF->0x0000000073721A1E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHLWAPI.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHLWAPI.dll->KERNEL32.dll:SetFileAttributesA - 0x000000007625ECBB->0x00000000737219C6[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHLWAPI.dll->KERNEL32.dll:CreateFileA - 0x00000000762453AE->0x0000000073722D20[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHLWAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - WINMM.dll->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WINMM.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WINMM.dll->KERNEL32.dll:_lwrite - 0x00000000762BF880->0x00000000737218E9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WINMM.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - WINMM.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - OLEAUT32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - OLEAUT32.dll->KERNEL32.dll:_lwrite - 0x00000000762BF880->0x00000000737218E9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - OLEAUT32.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - OLEAUT32.dll->KERNEL32.dll:CreateFileA - 0x00000000762453AE->0x0000000073722D20[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - MSACM32.dll->ADVAPI32.dll:RegCreateKeyW - 0x0000000074981514->0x0000000073721F28[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegCreateKeyA - 0x000000007497CD01->0x0000000073721E10[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegDeleteValueA - 0x000000007499A4EA->0x00000000737226F7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegOpenKeyExA - 0x0000000074984907->0x00000000737221D9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegDeleteValueW - 0x000000007497CF31->0x0000000073722799[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegOpenKeyExW - 0x000000007498468D->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegSetValueExA - 0x00000000749814B3->0x0000000073722593[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegSetValueExW - 0x00000000749814D6->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MSACM32.dll->ADVAPI32.dll:RegCreateKeyExW - 0x00000000749840FE->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:_lopen - 0x00000000762BF7F9->0x00000000737217A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:_lwrite - 0x00000000762BF880->0x00000000737218E9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - VERSION.dll->KERNEL32.dll:_lcreat - 0x00000000762BF84C->0x0000000073721848[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:DeleteFileA - 0x000000007624542C->0x0000000073721488[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - VERSION.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHELL32.dll->KERNEL32.dll:MoveFileExW - 0x0000000076259B15->0x000000007372168C[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHELL32.dll->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SHELL32.dll->KERNEL32.dll:CopyFileW - 0x00000000762682F5->0x000000007372136E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - sfc_os.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - USERENV.dll->KERNEL32.dll:MoveFileExW - 0x0000000076259B15->0x000000007372168C[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - USERENV.dll->KERNEL32.dll:PrivCopyFileExW - 0x00000000762BEA21->0x0000000073721962[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - dwmapi.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - SETUPAPI.dll->KERNEL32.dll:RegOpenKeyExW - 0x00000000762422F1->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:CopyFileW - 0x00000000762682F5->0x000000007372136E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:MoveFileExW - 0x0000000076259B15->0x000000007372168C[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:CreateFileA - 0x00000000762453AE->0x0000000073722D20[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:RegCreateKeyExW - 0x0000000076248643->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:RegDeleteValueW - 0x000000007625EA5D->0x0000000073722799[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:RegSetValueExW - 0x0000000076245BCD->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - SETUPAPI.dll->KERNEL32.dll:SetFileAttributesW - 0x000000007625D4DF->0x0000000073721A1E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - SETUPAPI.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - CFGMGR32.dll->ADVAPI32.dll:RegDeleteValueW - 0x000000007497CF31->0x0000000073722799[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - CFGMGR32.dll->ADVAPI32.dll:RegSetValueExW - 0x00000000749814D6->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - CFGMGR32.dll->ADVAPI32.dll:RegOpenKeyExW - 0x000000007498468D->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - CFGMGR32.dll->ADVAPI32.dll:RegCreateKeyExW - 0x00000000749840FE->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - CFGMGR32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - urlmon.dll->ADVAPI32.dll:RegOpenKeyExA - 0x0000000074984907->0x00000000737221D9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->ADVAPI32.dll:RegOpenKeyExW - 0x000000007498468D->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->ADVAPI32.dll:RegCreateKeyExA - 0x0000000074981469->0x0000000073721FBD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->ADVAPI32.dll:RegSetValueExA - 0x00000000749814B3->0x0000000073722593[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->ADVAPI32.dll:RegCreateKeyExW - 0x00000000749840FE->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->ADVAPI32.dll:RegSetValueExW - 0x00000000749814D6->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->ADVAPI32.dll:RegDeleteValueA - 0x000000007499A4EA->0x00000000737226F7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->KERNEL32.dll:CopyFileA - 0x00000000762658CD->0x0000000073721316[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->KERNEL32.dll:DeleteFileA - 0x000000007624542C->0x0000000073721488[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->KERNEL32.dll:SetFileAttributesA - 0x000000007625ECBB->0x00000000737219C6[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->KERNEL32.dll:CreateFileA - 0x00000000762453AE->0x0000000073722D20[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - urlmon.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - urlmon.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - iertutil.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - iertutil.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - iertutil.dll->ADVAPI32.dll:RegOpenKeyExW - 0x000000007498468D->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - iertutil.dll->ADVAPI32.dll:RegSetValueExW - 0x00000000749814D6->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - iertutil.dll->ADVAPI32.dll:RegDeleteValueW - 0x000000007497CF31->0x0000000073722799[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - iertutil.dll->ADVAPI32.dll:RegCreateKeyExW - 0x00000000749840FE->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegDeleteValueW - 0x000000007497CF31->0x0000000073722799[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegCreateKeyExW - 0x00000000749840FE->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegSetValueExW - 0x00000000749814D6->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegDeleteValueA - 0x000000007499A4EA->0x00000000737226F7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegOpenKeyExW - 0x000000007498468D->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegCreateKeyExA - 0x0000000074981469->0x0000000073721FBD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegSetValueExA - 0x00000000749814B3->0x0000000073722593[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->ADVAPI32.dll:RegOpenKeyExA - 0x0000000074984907->0x00000000737221D9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:MoveFileExA - 0x000000007626CCB1->0x000000007372161C[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:MoveFileExW - 0x0000000076259B15->0x000000007372168C[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:MoveFileW - 0x0000000076259AD8->0x00000000737215A7[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:MoveFileA - 0x00000000762BD929->0x0000000073721532[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:SetFileAttributesA - 0x000000007625ECBB->0x00000000737219C6[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:CopyFileA - 0x00000000762658CD->0x0000000073721316[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:SetFileAttributesW - 0x000000007625D4DF->0x0000000073721A1E[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - WININET.dll->KERNEL32.dll:CreateFileA - 0x00000000762453AE->0x0000000073722D20[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:DeleteFileA - 0x000000007624542C->0x0000000073721488[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - WININET.dll->KERNEL32.dll:DeleteFileW - 0x000000007624899B->0x00000000737214DD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - MPR.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - MSCTF.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - ntmarta.dll->ADVAPI32.dll:RegOpenKeyExW - 0x000000007498468D->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ntmarta.dll->ADVAPI32.dll:RegSetValueExW - 0x00000000749814D6->0x0000000073722647[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ntmarta.dll->ADVAPI32.dll:RegCreateKeyExW - 0x00000000749840FE->0x00000000737220C9[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ntmarta.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - ntmarta.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - WLDAP32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - NLAapi.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - napinsp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - pnrpnsp.dll->KERNEL32.dll:RegOpenKeyExW - 0x00000000762422F1->0x00000000737222AD[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - pnrpnsp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - fwpuclnt.dll->KERNEL32.dll:CreateFileW - 0x0000000076243F3C->0x0000000073722E39[C:\Windows\AppPatch\AcGenral.DLL]
             Iat - fwpuclnt.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]

------------------------------------------------------------------------------------------

      Image File Name[940 nvvsvc.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[4020 chrome.exe]Process Hook
             Iat - msftedit.dll->USER32.dll:EndPaint - 0x0000000075BA1341->0x000000006BA3DD1D[C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll]
             Iat - msftedit.dll->USER32.dll:BeginPaint - 0x0000000075BA1361->0x000000006BA3DCEB[C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll]

------------------------------------------------------------------------------------------

      Image File Name[1048 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1840 taskhost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3580 chrome.exe]Process Hook
             Iat - chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000240010
             Iat - chrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000240010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x00000000764B9875->0x000000006C5C7FF3[C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000240010

------------------------------------------------------------------------------------------

      Image File Name[3536 chrome.exe]Process Hook
             Iat - chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000960010
             Iat - chrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000960010

------------------------------------------------------------------------------------------

      Image File Name[1124 audiodg.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1168 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3056 postak.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1928 dwm.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3512 chrome.exe]Process Hook
             Iat - chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x00000000008D0010
             Iat - chrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x00000000008D0010

------------------------------------------------------------------------------------------

      Image File Name[2512 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1372 RaUI.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1400 mdm.exe]Process Hook
             Iat - mdm.exe->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - ADVAPI32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - USP10.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - OLEAUT32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - VERSION.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - SHLWAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - MSCTF.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - CLBCatQ.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - rsaenh.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - csm.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]
             Iat - MSDBG2.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007392FFF6[C:\Windows\syswow64\apphelp.dll]

------------------------------------------------------------------------------------------

      Image File Name[5104 WmiPrvSE.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1748 chrome.exe]Process Hook
             Iat - chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x00000000009C0010
             Iat - chrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x00000000009C0010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x00000000764B9875->0x000000006C5C7FF3[C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x00000000009C0010

------------------------------------------------------------------------------------------

      Image File Name[1496 spoolsv.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1740 avp.exe]Process Hook
             Iat - avp.exe->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0010
             Iat - avp.exe->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF007C
             Iat - avp.exe->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF00E8
             Iat - avp.exe->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFF0C4C
             Iat - avp.exe->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE06D0
             Iat - avp.exe->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFF0CB8
             Iat - avp.exe->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0D24
             Iat - avp.exe->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE073C
             Iat - avp.exe->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFF0D90
             Iat - avp.exe->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0154
             Iat - avp.exe->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF01C0
             Iat - avp.exe->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE07A8
             Iat - avp.exe->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFF0DFC
             C:\Windows\syswow64\KERNELBASE.dll - Hijack on Module File
             Iat - ushata.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFE04B4
             Iat - ushata.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0A9C
             Iat - ushata.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE0520
             Iat - ushata.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFE058C
             Iat - ushata.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0B08
             Iat - ushata.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF09C4
             Iat - ushata.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0A30
             Iat - ushata.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0A9C
             Iat - ushata.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE05F8
             Iat - ushata.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0664
             Iat - ushata.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0B08
             Iat - ushata.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF0B74
             Iat - ushata.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0BE0
             Iat - fltLib.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - fltLib.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - fltLib.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - USP10.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - USP10.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - USP10.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - USP10.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - USP10.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - USP10.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - USP10.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - USP10.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - USP10.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - USP10.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ADVAPI32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - ADVAPI32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ADVAPI32.dll->ntdll.dll:RtlReAllocateHeap - 0x00000000772524F1->0x000000007DFF0304
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - ADVAPI32.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - ADVAPI32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - ADVAPI32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ADVAPI32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ADVAPI32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - ADVAPI32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ADVAPI32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - sechost.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - sechost.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - sechost.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - CRYPTBASE.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - CRYPTBASE.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - MSCTF.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MSCTF.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - MSCTF.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - MSCTF.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - MSCTF.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - MSCTF.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - MSCTF.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avpservice.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avpservice.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avpservice.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - avpservice.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avpservice.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MSVCP100.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MSVCR100.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - MSVCR100.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - MSVCR100.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - MSVCR100.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - MSVCR100.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - MSVCR100.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - MSVCR100.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - MSVCR100.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - MSVCR100.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - MSVCR100.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - MSVCR100.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - MSVCR100.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - MSVCR100.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - MSVCR100.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - MSVCR100.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - avpmain.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - avpmain.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - avpmain.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - avpmain.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avpmain.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - avpmain.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - avpmain.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avpmain.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avpmain.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avpmain.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avpmain.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - avpmain.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - avpmain.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avpmain.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - avpmain.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - POWRPROF.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - POWRPROF.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - POWRPROF.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - POWRPROF.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - POWRPROF.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - SETUPAPI.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - SETUPAPI.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - SETUPAPI.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - SETUPAPI.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - SETUPAPI.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - SETUPAPI.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - SETUPAPI.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - SETUPAPI.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - SETUPAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - SETUPAPI.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - CFGMGR32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - CFGMGR32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - CFGMGR32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - CFGMGR32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CFGMGR32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CFGMGR32.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - CFGMGR32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - OLEAUT32.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - OLEAUT32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - OLEAUT32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - OLEAUT32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - OLEAUT32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - OLEAUT32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - OLEAUT32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - OLEAUT32.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - OLEAUT32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - OLEAUT32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - OLEAUT32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ole32.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - ole32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - ole32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ole32.dll->ntdll.dll:RtlReAllocateHeap - 0x00000000772524F1->0x000000007DFF0304
             Iat - ole32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - ole32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - DEVOBJ.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DEVOBJ.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - DEVOBJ.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - CRYPT32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - CRYPT32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - CRYPT32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CRYPT32.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - CRYPT32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - CRYPT32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - CRYPT32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CRYPT32.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - CRYPT32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - CRYPT32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - CRYPT32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - CRYPT32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - SHELL32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - SHELL32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - SHELL32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - SHLWAPI.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - SHLWAPI.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - SHLWAPI.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - SHLWAPI.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - SHLWAPI.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - SHLWAPI.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - SHLWAPI.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - SHLWAPI.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - SHLWAPI.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - SHLWAPI.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - Secur32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - Secur32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - Secur32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - Secur32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - Secur32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - Secur32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - Secur32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fssync.DLL->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - fssync.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - fssync.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - fssync.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fssync.DLL->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WINTRUST.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WINTRUST.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - WINTRUST.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINTRUST.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - WINTRUST.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINTRUST.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WINTRUST.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINTRUST.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINTRUST.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINTRUST.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINTRUST.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - DumpWriter.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - DumpWriter.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - DumpWriter.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - DumpWriter.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - DumpWriter.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - DumpWriter.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - DumpWriter.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - DumpWriter.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - DumpWriter.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - service.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - service.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - service.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - service.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - service.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - service.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - service.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - service.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - service.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - prremote.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - prremote.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - prremote.DLL->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - prremote.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - prremote.DLL->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - prremote.DLL->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - prremote.DLL->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - prremote.DLL->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - prremote.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - prloader.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - prloader.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - prloader.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - prloader.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - prloader.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - prloader.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - prloader.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - prloader.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - prloader.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - prloader.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - prloader.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - prloader.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - prloader.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - prloader.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - VERSION.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - VERSION.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - VERSION.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - VERSION.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - VERSION.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - VERSION.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - VERSION.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - nfio.ppl->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - nfio.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - nfio.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - nfio.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - nfio.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - nfio.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - nfio.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MPR.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - MPR.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - MPR.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - MPR.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MPR.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - MPR.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - fsdrvplg.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fsdrvplg.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - fsdrvplg.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - fsdrvplg.ppl->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - winreg.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - winreg.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - winreg.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - pxstub.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - params.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - params.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - params.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - app_core_legacy.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - app_core_legacy.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - app_core_legacy.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - app_core_legacy.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - app_core_legacy.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - app_core_legacy.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - app_core_legacy.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - key_value_storage.DLL->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - key_value_storage.DLL->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - key_value_storage.DLL->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - key_value_storage.DLL->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - key_value_storage.DLL->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - key_value_storage.DLL->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - key_value_storage.DLL->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - eka_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - eka_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - eka_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - updater_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - updater_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - updater_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - content_filtering_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - content_filtering_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - content_filtering_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - am_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - am_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - am_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ac_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ac_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ac_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - app_core_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - app_core_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - app_core_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - product_metainfo.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - product_metainfo.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - product_metainfo.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - plugins_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - plugins_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - plugins_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ksn_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ksn_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ksn_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ucp_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ucp_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ucp_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klifpp_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - klifpp_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klifpp_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - instrumental_meta.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - instrumental_meta.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - instrumental_meta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - storage.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - storage.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - storage.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - storage.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - storage.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - storage.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ichecker.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ichecker.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ichecker.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klifpp.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - klifpp.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klifpp.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - klifpp.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - klifpp.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - klifpp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ksn_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ksn_facade.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - ksn_facade.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ksn_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ksn_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - acassembler.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - acassembler.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - acassembler.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - acassembler.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - acassembler.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - RpcRtRemote.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - RpcRtRemote.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ckahum.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ckahum.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - ckahum.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ckahum.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ckahum.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - ckahum.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - ckahum.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - ckahum.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - CKAHComm.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CKAHComm.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - CKAHComm.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CKAHComm.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ckahrule.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - IPHLPAPI.DLL->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - IPHLPAPI.DLL->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - WS2_32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WS2_32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - thpimpl.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - thpimpl.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - thpimpl.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - thpimpl.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - thpimpl.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - propmap.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - tm.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - tm.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - tm.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - tm.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - tm.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - dtreg.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - bl.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - bl.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - bl.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - bl.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - bl.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - bl.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - bl.ppl->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - bl.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - bl.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - libcurl.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - libcurl.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - libcurl.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - libcurl.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - LIBEAY32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - LIBEAY32.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - LIBEAY32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - LIBEAY32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - LIBEAY32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WSOCK32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - SSLEAY32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WLDAP32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WLDAP32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WLDAP32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WLDAP32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WLDAP32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WLDAP32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WLDAP32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WLDAP32.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - WLDAP32.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - wmihlpr.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - wmihlpr.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - wmihlpr.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - wmihlpr.ppl->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - wmihlpr.ppl->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - wmihlpr.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - wmihlpr.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - wmihlpr.ppl->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - wmihlpr.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - vercheck.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - regmap.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - localization_manager.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - localization_manager.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - localization_manager.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - threats_disinfection.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - threats_disinfection.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - threats_disinfection.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - threats_disinfection.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - threats_disinfection.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - threats_disinfection.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - threats_disinfection.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - threats_disinfection.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - threats_disinfection.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - threats_disinfection.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - threats_disinfection.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - am_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - am_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - am_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ndetect.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ndetect.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ndetect.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - ndetect.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - crpthlpr.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - crpthlpr.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - crpthlpr.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - crpthlpr.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - crpthlpr.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - crpthlpr.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - crpthlpr.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - crpthlpr.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - wtsapi32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - wtsapi32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - wtsapi32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - report.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cf_facade.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - cf_facade.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - cf_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cf_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - cf_facade.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - cf_facade.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - cf_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - kpcengine.2.2.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - kpcengine.2.2.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - kpcengine.2.2.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - kpcengine.2.2.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - icuin40.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - icuuc40.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - icuio40.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - schedule.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - timer.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - timer.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - reportdb.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - reportdb.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - reportdb.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ksnhelper.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ksnhelper.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ksnhelper.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ksnhelper.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ksnhelper.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - packed_io.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - packed_io.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - packed_io.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ProcessMonitor.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - ProcessMonitor.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ProcessMonitor.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - ProcessMonitor.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ProcessMonitor.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ProcessMonitor.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - excludemanager.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - excludemanager.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - excludemanager.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - sfdb.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - format_recognizer.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - format_recognizer.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - format_recognizer.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - lic.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - lic.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - lic.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - lic.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - lic.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - lic.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cbi.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - hashmd5.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ThreatsManager.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - ThreatsManager.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ThreatsManager.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ThreatsManager.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ThreatsManager.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - qb.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - prutil.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - avs.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avs.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avs.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avs.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avs.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avs.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avs.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ksn_client.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ksn_client.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ksn_client.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - transport_provider.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - transport_provider.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - transport_provider.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - CryptoStaticProvider.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - CryptoStaticProvider.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - CryptoStaticProvider.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rsaenh.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - rsaenh.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rsaenh.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - rsaenh.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - rsaenh.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - rsaenh.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - rsaenh.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - rsaenh.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - rsaenh.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - rsaenh.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - uds.dll.92dff4ee3f31d4a8028788006d921d26->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - avengine.dll.c7e81bee01af0a4599865c8685990873->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ucp_agent.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ucp_agent.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ucp_agent.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ucp_agent.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - ucp_agent.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ucp_agent.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - persistent_queue.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - persistent_queue.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - persistent_queue.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - persistent_queue.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - persistent_queue.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - persistent_queue.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - persistent_queue.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - filesystem_services.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - filesystem_services.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - filesystem_services.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klavemu.kdl.1b87346303021c84ecc99a3f7cd1ab73->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - klavemu.kdl.1b87346303021c84ecc99a3f7cd1ab73->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - kjim.kdl.a918b448be75f1e6825549ddb6692d7a->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - kjim.kdl.a918b448be75f1e6825549ddb6692d7a->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - mark.kdl.fed411a74cc5c5dac6ac7d81339fc781->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - mark.kdl.fed411a74cc5c5dac6ac7d81339fc781->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - imagehlp.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - vlns.kdl.317df7c0eff0939e6289f5c72f65ba51->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - qscan.kdl.fb1fec251baaa2ab4237fb3cff510751->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - qscan.kdl.fb1fec251baaa2ab4237fb3cff510751->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - pbs.kdl.7fc520e215b0b2b41fa2e224fe8f6030->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - pbs.kdl.7fc520e215b0b2b41fa2e224fe8f6030->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ncrypt.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - ncrypt.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ncrypt.dll->ntdll.dll:RtlSizeHeap - 0x000000007724302A->0x000000007DFF0370
             Iat - ncrypt.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - ncrypt.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ncrypt.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ncrypt.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ncrypt.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - ncrypt.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - bcrypt.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - bcrypt.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - bcrypt.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - bcrypt.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - bcrypt.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - bcrypt.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - bcrypt.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - bcrypt.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - bcrypt.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - bcryptprimitives.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - bcryptprimitives.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - bcryptprimitives.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - bcryptprimitives.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - bcryptprimitives.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - bcryptprimitives.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - bcryptprimitives.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - GPAPI.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - WINSTA.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - WINSTA.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINSTA.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINSTA.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINSTA.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINSTA.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - avzkrnl.dll->kernel32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - avzkrnl.dll->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avzkrnl.dll->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avzkrnl.dll->kernel32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avzkrnl.dll->kernel32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - avzkrnl.dll->kernel32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - avzkrnl.dll->kernel32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - avzkrnl.dll->kernel32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - avzkrnl.dll->kernel32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - avzkrnl.dll->kernel32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - avzkrnl.dll->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - avzkrnl.dll->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - avzkrnl.dll->kernel32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - avzkrnl.dll->kernel32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - comctl32.dll[WinSxs]->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - winspool.drv->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - winspool.drv->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - winspool.drv->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - winspool.drv->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - winspool.drv->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - winspool.drv->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - winspool.drv->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - winspool.drv->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - winspool.drv->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - winspool.drv->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - winspool.drv->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - winspool.drv->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - wininet.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - wininet.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - wininet.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - wininet.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wininet.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - wininet.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - wininet.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - wininet.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - wininet.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - wininet.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - wininet.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - iertutil.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - iertutil.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - iertutil.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - iertutil.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - iertutil.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - iertutil.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - iertutil.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - iertutil.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - iertutil.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - iertutil.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - urlmon.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - urlmon.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - urlmon.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - urlmon.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - urlmon.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - urlmon.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - urlmon.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - urlmon.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - urlmon.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - urlmon.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - comdlg32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - comdlg32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - comdlg32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - comdlg32.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - comdlg32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - comdlg32.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - comdlg32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - comdlg32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - comdlg32.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - comdlg32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - kavsys.kdl.7b53984bb934e599a4e3668b2f678d48->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - kavsys.kdl.7b53984bb934e599a4e3668b2f678d48->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - arkmon.kdl.92baa7debedc6ebe803bc14bc5180ab3->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - arkmon.kdl.92baa7debedc6ebe803bc14bc5180ab3->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - msi.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - msi.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - msi.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - msi.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - msi.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - msi.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - msi.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - msi.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - msi.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - msi.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - msi.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - stat.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - stat.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - stat.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - stat.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - stat.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - ac_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ac_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ac_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - procmon.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - procmon.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - procmon.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - procmon.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - procmon.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - procmon.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - netwatch.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - netwatch.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - netwatch.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - netwatch.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - netwatch.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - netwatch.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - netwatch.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - RASAPI32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - RASAPI32.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - RASAPI32.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - rasman.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - rasman.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - rasman.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - rasman.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - rasman.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - rasman.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rasman.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - wlanapi.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - wlanapi.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - wlanutil.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - memmon.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - memmon.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - memmon.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - memmon.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - memmon.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - safe_banking.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - safe_banking.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - safe_banking.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - safe_banking.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - safe_banking.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - safe_banking.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - safe_banking.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ekasyswatch.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - ekasyswatch.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ekasyswatch.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - sc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - sc.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - sc.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - hips.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - hips.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - hips.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - hips.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - hips.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - hips.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - antispam.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - antispam.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - antispam.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - antispam.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - antispam.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - antispam.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - mc.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - mc.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - mc.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - mc.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - mc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ahids.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - oas.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - oas.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - oas.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - oas.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - oas.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - oas.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - imc.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - imc.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - imc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - mswsock.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - mswsock.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - httpscan.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - httpscan.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - httpscan.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - plugins_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - plugins_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - plugins_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - webnetstat.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - webnetstat.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - webnetstat.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - webnetstat.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - webnetstat.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - volenum.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - EXTLprtc.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - EXTLprtc.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - EXTLprtc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - smtpprtc.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - smtpprtc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wshtcpip.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - appcat.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - appcat.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - appcat.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wship6.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - wship6.dll->ntdll.dll:NtTerminateProcess - 0x000000007722FC90->0x000000007DFF0E68
             Iat - ICQprtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - ICQprtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - netapi32.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - netapi32.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - netutils.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - srvcli.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - srvcli.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - srvcli.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - srvcli.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - srvcli.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wkscli.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - wkscli.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wkscli.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - wkscli.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - wkscli.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - pop3prtc.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - pop3prtc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - trafmon2.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - trafmon2.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - trafmon2.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - trafmon2.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - trafmon2.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - trafmon2.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - trafmon2.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - MSNprtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - MSNprtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - klavasyswatch.dll.8cf37eacf5e286f585c07168edfe0e5a->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINMM.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINMM.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINMM.dll->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - WINMM.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - WINMM.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - WINMM.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINMM.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINMM.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - WINMM.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINMM.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WINMM.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - integrity_control.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - integrity_control.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - integrity_control.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - JbrPrtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - JbrPrtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - imapprtc.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - imapprtc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - FileCategorizer.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - FileCategorizer.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - FileCategorizer.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - nntpprtc.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - nntpprtc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - IRCPrtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - IRCPrtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - Yhoprtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - Yhoprtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - MMPprtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - MMPprtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - aphishex.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - aphishex.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - aphishex.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - sys_critical_obj.dll->kernel32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - sys_critical_obj.dll->kernel32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - proxydet.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - proxydet.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - proxydet.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - Updater.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - Updater.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - Updater.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - Updater.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - Updater.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - Updater.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - Updater.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - Updater.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - Updater.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - Updater.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - diffs.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - diffs.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - WINHTTP.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - WINHTTP.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - WINHTTP.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - WINHTTP.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - WINHTTP.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - WINHTTP.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - WINHTTP.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - WINHTTP.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - WINHTTP.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - WINHTTP.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - WINHTTP.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - webio.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - webio.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - webio.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - webio.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - webio.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - webio.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - webio.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - webio.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - webio.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - webio.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - DNSAPI.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - DNSAPI.dll->ntdll.dll:RtlReAllocateHeap - 0x00000000772524F1->0x000000007DFF0304
             Iat - DNSAPI.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - fwpuclnt.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - fwpuclnt.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - fwpuclnt.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - fwpuclnt.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - fwpuclnt.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - fwpuclnt.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - fwpuclnt.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - fwpuclnt.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - fwpuclnt.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - fwpuclnt.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - credssp.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - credssp.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - credssp.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - credssp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - NLAapi.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - NLAapi.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - NLAapi.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - NLAapi.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - NLAapi.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - NLAapi.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - NLAapi.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - NLAapi.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - NLAapi.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - NLAapi.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - napinsp.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - napinsp.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - napinsp.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - napinsp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - pnrpnsp.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - pnrpnsp.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - pnrpnsp.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - pnrpnsp.dll->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - pnrpnsp.dll->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - pnrpnsp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - pnrpnsp.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - pnrpnsp.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - pnrpnsp.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - winrnr.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - finance_url_categorizer.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - finance_url_categorizer.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - finance_url_categorizer.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cf_anti_malware_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - cf_anti_malware_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - cf_anti_malware_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - vulnerability_status_provider.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - vulnerability_status_provider.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - vulnerability_status_provider.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - vulnerability_status_provider.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - vulnerability_status_provider.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - uniarc.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - minizip.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - network_services.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - network_services.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - network_services.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - cab.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cab.ppl->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - cab.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - cab.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - cab.ppl->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - cab.ppl->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - cab.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - cab.ppl->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - cab.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - cab.ppl->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - arj.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - httpanlz.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - httpanlz.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - httpanlz.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - rar.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - traffic_processing_product_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - traffic_processing_product_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - traffic_processing_product_facade.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - traffic_processing_product_facade.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - traffic_processing_product_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - lha.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - url_processing.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - url_processing.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - url_processing.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:HeapCreate - 0x0000000076244A15->0x000000007DFF0448
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:HeapDestroy - 0x0000000076243597->0x000000007DFF04B4
             Iat - bsshlp2.kdl.5d36dc0bd740bc9d5c5aea9e6b8e67fe->KERNEL32.dll:HeapSize - 0x000000007724302A->0x000000007DFF0370
             Iat - office_antivirus_facade.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - office_antivirus_facade.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - office_antivirus_facade.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - swpragueplugin.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - swpragueplugin.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - swpragueplugin.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - mdb.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - mdb.ppl->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - mdb.ppl->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - mdb.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - mdb.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - mdb.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - mdb.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cf_prague_adapter.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - cf_prague_adapter.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - cf_prague_adapter.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - mapi32.dll->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - mapi32.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - mapi32.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - mapi32.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - mapi32.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - mapi32.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - mapi32.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - mapi32.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - FTPprtc.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - FTPprtc.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - FTPprtc.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - msoe.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - msoe.ppl->KERNEL32.dll:GetModuleHandleA - 0x0000000076241245->0x000000007DFF0F40
             Iat - msoe.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - msoe.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - msoe.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cf_response_provider.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - cf_response_provider.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - cf_response_provider.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - mailmsg.ppl->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - mailmsg.ppl->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - mailmsg.ppl->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - mailmsg.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - anti_phishing_http_filter.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - anti_phishing_http_filter.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - anti_phishing_http_filter.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - anti_phishing_http_filter.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - anti_phishing_http_filter.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - wdiskio.ppl->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - wdiskio.ppl->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - wdiskio.ppl->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - ntmarta.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - ntmarta.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - ntmarta.dll->KERNEL32.dll:CreateThread - 0x00000000762434B5->0x000000007DFF03DC
             Iat - ntmarta.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - ntmarta.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - ntmarta.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - ntmarta.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cryptnet.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - cryptnet.dll->KERNEL32.dll:HeapAlloc - 0x000000007723E046->0x000000007DFF022C
             Iat - cryptnet.dll->KERNEL32.dll:HeapReAlloc - 0x00000000772524F1->0x000000007DFF0304
             Iat - cryptnet.dll->KERNEL32.dll:HeapFree - 0x00000000762414C9->0x000000007DFF0520
             Iat - cryptnet.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C
             Iat - cryptnet.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - cryptnet.dll->KERNEL32.dll:LoadLibraryExA - 0x00000000762448FB->0x000000007DFE0880
             Iat - cryptnet.dll->KERNEL32.dll:LoadLibraryA - 0x00000000762449BF->0x000000007DFE0814
             Iat - cryptnet.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - apphelp.dll->ntdll.dll:RtlFreeHeap - 0x000000007723DFA5->0x000000007DFF0298
             Iat - apphelp.dll->ntdll.dll:RtlAllocateHeap - 0x000000007723E046->0x000000007DFF022C
             Iat - apphelp.dll->KERNEL32.dll:LoadLibraryExW - 0x0000000076244945->0x000000007DFE08EC
             Iat - apphelp.dll->KERNEL32.dll:FreeLibrary - 0x00000000762434A8->0x000000007DFF0ED4
             Iat - apphelp.dll->KERNEL32.dll:LoadLibraryW - 0x0000000076244913->0x000000007DFE0958
             Iat - apphelp.dll->KERNEL32.dll:SetErrorMode - 0x0000000076241B00->0x000000007DFE00E8
             Iat - apphelp.dll->KERNEL32.dll:SetUnhandledExceptionFilter - 0x00000000762487B1->0x000000007DFE0154
             Iat - apphelp.dll->KERNEL32.dll:GetModuleHandleW - 0x0000000076243490->0x000000007DFE0010
             Iat - apphelp.dll->KERNEL32.dll:GetProcAddress - 0x0000000076241222->0x000000007DFE007C

------------------------------------------------------------------------------------------

      Image File Name[1548 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1612 armsvc.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1652 nvxdsync.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1660 nvvsvc.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1688 HPSIsvc.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1792 nusb3mon.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[1956 taskeng.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2012 taskeng.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2092 PnkBstrA.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3040 szninstall.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2192 PsiService_2.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3884 SearchProtocolHost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2252 RalinkRegistryWriter.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2328 svchost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2460 GoogleCrashHandler.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[2468 GoogleCrashHandler64.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3684 nvtray.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3064 SearchFilterHost.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3360 chrome.exe]Process Hook
             Iat - chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000940010
             Iat - chrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000940010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x00000000764B9875->0x000000006C5C7FF3[C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000940010

------------------------------------------------------------------------------------------

      Image File Name[2968 RAVCpl64.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3160 chrome.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3312 jusched.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3676 SearchIndexer.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3400 WmiPrvSE.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[3480 chrome.exe]Process Hook
             Nothing

------------------------------------------------------------------------------------------

      Image File Name[4636 chrome.exe]Process Hook
             Iat - chrome.exe->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000D00010
             Iat - chrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000D00010
             Iat - pdf.dll->GDI32.dll:GetFontData - 0x00000000764B9875->0x000000006C5C7FF3[C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\chrome.dll]
             Iat - ppGoogleNaClPluginChrome.dll->KERNEL32.dll:CreateNamedPipeW - 0x00000000762C41BB->0x0000000000D00010

==========================================================================================

KernelCallbackTable

      Image File Name[4 System]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[764 lsm.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[1008 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\user32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\user32.dll
             fnDWORD - OK - C:\Windows\system32\user32.dll
             fnNCDESTROY - OK - C:\Windows\system32\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\user32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\user32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\user32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\user32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\user32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\user32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\user32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\user32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\user32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\user32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\user32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\user32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\user32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\user32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\user32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\user32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\user32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\user32.dll
             fnHkINDWORD - OK - C:\Windows\system32\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\user32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\user32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\user32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\user32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\user32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\user32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\user32.dll
             ClientCopyImage - OK - C:\Windows\system32\user32.dll
             ClientEventCallback - OK - C:\Windows\system32\user32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\user32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\user32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\user32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\user32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\user32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\user32.dll
             ClientGetListboxString - OK - C:\Windows\system32\user32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\user32.dll
             ClientLoadImage - OK - C:\Windows\system32\user32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\user32.dll
             ClientLoadMenu - OK - C:\Windows\system32\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\user32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\user32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\user32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\user32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\user32.dll
             ClientCharToWchar - OK - C:\Windows\system32\user32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\user32.dll
             ClientThreadSetup - OK - C:\Windows\system32\user32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\user32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\user32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\user32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\user32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\user32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\user32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\user32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\user32.dll
             fnIMECONTROL - OK - C:\Windows\system32\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\user32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\user32.dll
             ClientLoadStringW - OK - C:\Windows\system32\user32.dll
             ClientLoadOLE - OK - C:\Windows\system32\user32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\user32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\user32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\user32.dll
             fnTOUCH - OK - C:\Windows\system32\user32.dll
             fnGESTURE - OK - C:\Windows\system32\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[468 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3456 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4540 PCHunter64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[700 csrss.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[412 smss.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[420 winlogon.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[964 nvSCPAPISvr.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3600 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2028 explorer.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[588 csrss.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[668 wininit.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1224 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2416 avp.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\user32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\user32.dll
             fnDWORD - OK - C:\Windows\syswow64\user32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\user32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\user32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\user32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\user32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\user32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\user32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\user32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\user32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\user32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\user32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\user32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\user32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\user32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\user32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\user32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\user32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\user32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\user32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\user32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\user32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\user32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\user32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\user32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\user32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\user32.dll
             ClientLoadLibrary - apfn hook - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ushata.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\user32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\user32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\user32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\user32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\user32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\user32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\user32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\user32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\user32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\user32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\user32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\user32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\user32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\user32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\user32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\user32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\user32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\user32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\user32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\user32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\user32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\user32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\user32.dll
             fnTOUCH - OK - C:\Windows\syswow64\user32.dll
             fnGESTURE - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[1316 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[740 services.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[756 lsass.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[808 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4580 sppsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[872 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2396 daemonu.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[940 nvvsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1840 taskhost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1048 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3580 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3536 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1124 audiodg.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\System32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\System32\USER32.dll
             fnDWORD - OK - C:\Windows\System32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\System32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\System32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\System32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\System32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\System32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\System32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\System32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\System32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\System32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\System32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\System32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\System32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\System32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\System32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\System32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\System32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\System32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\System32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\System32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\System32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\System32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\System32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\System32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\System32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\System32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\System32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\System32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\System32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\System32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\System32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\System32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\System32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\System32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\System32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\System32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\System32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\System32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\System32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\System32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\System32\USER32.dll
             ClientCopyImage - OK - C:\Windows\System32\USER32.dll
             ClientEventCallback - OK - C:\Windows\System32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\System32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\System32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\System32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\System32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\System32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\System32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\System32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\System32\USER32.dll
             ClientLoadImage - OK - C:\Windows\System32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\System32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\System32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\System32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\System32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\System32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\System32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\System32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\System32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\System32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\System32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\System32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\System32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\System32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\System32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\System32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\System32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\System32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\System32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\System32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\System32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\System32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\System32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\System32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\System32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\System32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\System32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\System32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\System32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\System32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\System32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\System32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\System32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\System32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\System32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\System32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\System32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\System32\USER32.dll
             fnTOUCH - OK - C:\Windows\System32\USER32.dll
             fnGESTURE - OK - C:\Windows\System32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\System32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1548 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1168 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3056 postak.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1928 dwm.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3512 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2512 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1372 RaUI.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1400 mdm.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1748 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1448 WMIADAP.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1496 spoolsv.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2260 SearchProtocolHost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1740 avp.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\user32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\user32.dll
             fnDWORD - OK - C:\Windows\syswow64\user32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\user32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\user32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\user32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\user32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\user32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\user32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\user32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\user32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\user32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\user32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\user32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\user32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\user32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\user32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\user32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\user32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\user32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\user32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\user32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\user32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\user32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\user32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\user32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\user32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\user32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\user32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\user32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\user32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\user32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\user32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\user32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\user32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\user32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\user32.dll
             ClientLoadLibrary - apfn hook - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ushata.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\user32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\user32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\user32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\user32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\user32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\user32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\user32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\user32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\user32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\user32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\user32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\user32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\user32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\user32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\user32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\user32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\user32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\user32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\user32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\user32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\user32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\user32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\user32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\user32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\user32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\user32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\user32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\user32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\user32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\user32.dll
             fnTOUCH - OK - C:\Windows\syswow64\user32.dll
             fnGESTURE - OK - C:\Windows\syswow64\user32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\user32.dll

------------------------------------------------------------------------------------------

      Image File Name[1612 armsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1652 nvxdsync.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1660 nvvsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1688 HPSIsvc.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4020 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1792 nusb3mon.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[1956 taskeng.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2012 taskeng.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2092 PnkBstrA.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3040 szninstall.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2192 PsiService_2.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2252 RalinkRegistryWriter.exe]KernelCallbackTable

------------------------------------------------------------------------------------------

      Image File Name[2328 svchost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2460 GoogleCrashHandler.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2468 GoogleCrashHandler64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3684 nvtray.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3064 SearchFilterHost.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3360 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[2968 RAVCpl64.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3160 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3312 jusched.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3676 SearchIndexer.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3400 WmiPrvSE.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\system32\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\system32\USER32.dll
             fnDWORD - OK - C:\Windows\system32\USER32.dll
             fnNCDESTROY - OK - C:\Windows\system32\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\system32\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\system32\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\system32\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\system32\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\system32\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\system32\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\system32\USER32.dll
             fnHkINDWORD - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\system32\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\system32\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\system32\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\system32\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\system32\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\system32\USER32.dll
             ClientCopyImage - OK - C:\Windows\system32\USER32.dll
             ClientEventCallback - OK - C:\Windows\system32\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\system32\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\system32\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\system32\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\system32\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\system32\USER32.dll
             ClientGetListboxString - OK - C:\Windows\system32\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\system32\USER32.dll
             ClientLoadImage - OK - C:\Windows\system32\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\system32\USER32.dll
             ClientLoadMenu - OK - C:\Windows\system32\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\system32\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\system32\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\system32\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\system32\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\system32\USER32.dll
             ClientCharToWchar - OK - C:\Windows\system32\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\system32\USER32.dll
             ClientThreadSetup - OK - C:\Windows\system32\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\system32\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\system32\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\system32\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\system32\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\system32\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\system32\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\system32\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\system32\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\system32\USER32.dll
             fnIMECONTROL - OK - C:\Windows\system32\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\system32\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\system32\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\system32\USER32.dll
             ClientLoadStringW - OK - C:\Windows\system32\USER32.dll
             ClientLoadOLE - OK - C:\Windows\system32\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\system32\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\system32\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\system32\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\system32\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\system32\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\system32\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\system32\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\system32\USER32.dll
             fnTOUCH - OK - C:\Windows\system32\USER32.dll
             fnGESTURE - OK - C:\Windows\system32\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\system32\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[3480 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[4636 chrome.exe]KernelCallbackTable
             fnCOPYDATA - OK - C:\Windows\syswow64\USER32.dll
             fnCOPYGLOBALDATA - OK - C:\Windows\syswow64\USER32.dll
             fnDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnNCDESTROY - OK - C:\Windows\syswow64\USER32.dll
             fnDWORDOPTINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTDRAG - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINCNTOUTSTRING - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCOMPAREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDELETEITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPDRAWITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPMDICREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPMEASUREITEMSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPWINDOWPOS - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPPOINT5 - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTNCCALCSIZE - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPSCROLLINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINPAINTCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSIZECLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINDESTROYCLIPBRD - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINSTRINGNULL - OK - C:\Windows\syswow64\USER32.dll
             fnINDEVICECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnPOWERBROADCAST - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOPTOUTLPDWORDOPTOUTLPDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTDWORDINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnPOUTLPINT - OK - C:\Windows\syswow64\USER32.dll
             fnSENTDDEMSG - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTSTYLECHANGE - OK - C:\Windows\syswow64\USER32.dll
             fnHkINDWORD - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTACTIVATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPCBTCREATESTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPDEBUGHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMOUSEHOOKSTRUCTEX - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPKBDLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSLLHOOKSTRUCT - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPMSG - OK - C:\Windows\syswow64\USER32.dll
             fnHkINLPRECT - OK - C:\Windows\syswow64\USER32.dll
             fnHkOPTINLPEVENTMSG - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEIn2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut1 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyDDEOut2 - OK - C:\Windows\syswow64\USER32.dll
             ClientCopyImage - OK - C:\Windows\syswow64\USER32.dll
             ClientEventCallback - OK - C:\Windows\syswow64\USER32.dll
             ClientFindMnemChar - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeDDEHandle - OK - C:\Windows\syswow64\USER32.dll
             ClientFreeLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientGetCharsetInfo - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEFlags - OK - C:\Windows\syswow64\USER32.dll
             ClientGetDDEHookData - OK - C:\Windows\syswow64\USER32.dll
             ClientGetListboxString - OK - C:\Windows\syswow64\USER32.dll
             ClientGetMessageMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadImage - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLibrary - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadMenu - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadLocalT1Fonts - OK - C:\Windows\syswow64\USER32.dll
             ClientPSMTextOut - OK - C:\Windows\syswow64\USER32.dll
             ClientLpkDrawTextEx - OK - C:\Windows\syswow64\USER32.dll
             ClientExtTextOutW - OK - C:\Windows\syswow64\USER32.dll
             ClientGetTextExtentPointW - OK - C:\Windows\syswow64\USER32.dll
             ClientCharToWchar - OK - C:\Windows\syswow64\USER32.dll
             ClientAddFontResourceW - OK - C:\Windows\syswow64\USER32.dll
             ClientThreadSetup - OK - C:\Windows\syswow64\USER32.dll
             ClientDeliverUserApc - OK - C:\Windows\syswow64\USER32.dll
             ClientNoMemoryPopup - OK - C:\Windows\syswow64\USER32.dll
             ClientMonitorEnumProc - OK - C:\Windows\syswow64\USER32.dll
             ClientCallWinEventProc - OK - C:\Windows\syswow64\USER32.dll
             ClientWaitMessageExMPH - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWGetProcModule - OK - C:\Windows\syswow64\USER32.dll
             ClientWOWTask16SchedNotify - OK - C:\Windows\syswow64\USER32.dll
             ClientImmLoadLayout - OK - C:\Windows\syswow64\USER32.dll
             ClientImmProcessKey - OK - C:\Windows\syswow64\USER32.dll
             fnIMECONTROL - OK - C:\Windows\syswow64\USER32.dll
             fnINWPARAMDBCSCHAR - OK - C:\Windows\syswow64\USER32.dll
             fnGETTEXTLENGTHS - OK - C:\Windows\syswow64\USER32.dll
             fnINLPKDRAWSWITCHWND - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadStringW - OK - C:\Windows\syswow64\USER32.dll
             ClientLoadOLE - OK - C:\Windows\syswow64\USER32.dll
             ClientRegisterDragDrop - OK - C:\Windows\syswow64\USER32.dll
             ClientRevokeDragDrop - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTMENUGETOBJECT - OK - C:\Windows\syswow64\USER32.dll
             ClientPrinterThunk - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPCOMBOBOXINFO - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPSCROLLBARINFO - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnINOUTLPUAHMEASUREMENUITEM - OK - C:\Windows\syswow64\USER32.dll
             fnINLPUAHDRAWMENU - OK - C:\Windows\syswow64\USER32.dll
             fnOUTLPTITLEBARINFOEX - OK - C:\Windows\syswow64\USER32.dll
             fnTOUCH - OK - C:\Windows\syswow64\USER32.dll
             fnGESTURE - OK - C:\Windows\syswow64\USER32.dll
             fnINLPHLPSTRUCT - OK - C:\Windows\syswow64\USER32.dll

------------------------------------------------------------------------------------------

      Image File Name[0 Idle]KernelCallbackTable

==========================================================================================

Port

       Tcp 0.0.0.0 : 135 - 0.0.0.0 : 0 - LISTENING - 1008 - C:\Windows\System32\svchost.exe
       Tcp 10.77.19.201 : 139 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 1110 - 0.0.0.0 : 0 - LISTENING - 1740 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
       Tcp 127.0.0.1 : 1110 - 127.0.0.1 : 62507 - TIME_WAIT - 0 - 
       Tcp 127.0.0.1 : 2559 - 0.0.0.0 : 0 - LISTENING - 2396 - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
       Tcp 0.0.0.0 : 49152 - 0.0.0.0 : 0 - LISTENING - 668 - C:\Windows\System32\wininit.exe
       Tcp 0.0.0.0 : 49153 - 0.0.0.0 : 0 - LISTENING - 468 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49154 - 0.0.0.0 : 0 - LISTENING - 1048 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49155 - 0.0.0.0 : 0 - LISTENING - 756 - C:\Windows\System32\lsass.exe
       Tcp 127.0.0.1 : 62509 - 127.0.0.1 : 1110 - TIME_WAIT - 0 - 
       Tcp 127.0.0.1 : 62515 - 127.0.0.1 : 1110 - TIME_WAIT - 0 - 
       Tcp 127.0.0.1 : 62517 - 127.0.0.1 : 1110 - TIME_WAIT - 0 - 
       Tcp 10.77.19.201 : 62535 - 10.77.19.24 : 1900 - ESTABLISHED - 1048 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 62872 - 0.0.0.0 : 0 - LISTENING - 740 - C:\Windows\System32\services.exe
       Tcp 0.0.0.0 : 62873 - 0.0.0.0 : 0 - LISTENING - 2512 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 135 - 0.0.0.0 : 0 - LISTENING - 1008 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 445 - 0.0.0.0 : 0 - LISTENING - 4 - System
       Tcp 0.0.0.0 : 1110 - 0.0.0.0 : 0 - LISTENING - 1740 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
       Tcp 0.0.0.0 : 1110 - 0.0.0.0 : 62495 - ESTABLISHED - 1740 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
       Tcp 0.0.0.0 : 49152 - 0.0.0.0 : 0 - LISTENING - 668 - C:\Windows\System32\wininit.exe
       Tcp 0.0.0.0 : 49153 - 0.0.0.0 : 0 - LISTENING - 468 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49154 - 0.0.0.0 : 0 - LISTENING - 1048 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 49155 - 0.0.0.0 : 0 - LISTENING - 756 - C:\Windows\System32\lsass.exe
       Tcp 0.0.0.0 : 62495 - 0.0.0.0 : 1110 - ESTABLISHED - 4020 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
       Tcp 0.0.0.0 : 62496 - 0.0.0.0 : 443 - ESTABLISHED - 1740 - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
       Tcp 0.0.0.0 : 62872 - 0.0.0.0 : 0 - LISTENING - 740 - C:\Windows\System32\services.exe
       Tcp 0.0.0.0 : 62873 - 0.0.0.0 : 0 - LISTENING - 2512 - C:\Windows\System32\svchost.exe
       Tcp 0.0.0.0 : 62908 - 0.0.0.0 : 5222 - ESTABLISHED - 4020 - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
       Udp 10.77.19.201 : 137 - * : * - 4 - System
       Udp 10.77.19.201 : 138 - * : * - 4 - System
       Udp 0.0.0.0 : 500 - * : * - 1048 - C:\Windows\System32\svchost.exe
       Udp 10.77.19.201 : 1900 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 127.0.0.1 : 1900 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 4500 - * : * - 1048 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 5355 - * : * - 1316 - C:\Windows\System32\svchost.exe
       Udp 127.0.0.1 : 44301 - * : * - 2092 - C:\Windows\SysWOW64\PnkBstrA.exe
       Udp 127.0.0.1 : 48000 - * : * - 2396 - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
       Udp 127.0.0.1 : 48001 - * : * - 3684 - C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
       Udp 10.77.19.201 : 52676 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 127.0.0.1 : 52677 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 127.0.0.1 : 62338 - * : * - 4540 - C:\Users\JerryMX\Downloads\PCHunter_free\PCHunter_free\PCHunter64.exe
       Udp 0.0.0.0 : 500 - * : * - 1048 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 1900 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 1900 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 4500 - * : * - 1048 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 5355 - * : * - 1316 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 52674 - * : * - 3456 - C:\Windows\System32\svchost.exe
       Udp 0.0.0.0 : 52675 - * : * - 3456 - C:\Windows\System32\svchost.exe

==========================================================================================

Tcpip

       IRP_MJ_CREATE - OK - 0xFFFFF880020E37E0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF880020E37E0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF88002021200 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF880020E37E0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF880020E37E0 - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Nsiproxy

       IRP_MJ_CREATE - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF88004C69990 - C:\Windows\system32\drivers\nsiproxy.sys - Microsoft Corporation

==========================================================================================

Tdx

       IRP_MJ_CREATE - OK - 0xFFFFF880045D58C0 - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_CREATE_NAMED_PIPE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLOSE - OK - 0xFFFFF880045D6B70 - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_READ - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_WRITE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_EA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FLUSH_BUFFERS - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_VOLUME_INFORMATION - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DIRECTORY_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_FILE_SYSTEM_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_DEVICE_CONTROL - OK - 0xFFFFF880045D60C0 - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_INTERNAL_DEVICE_CONTROL - OK - 0xFFFFF880045D1870 - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_SHUTDOWN - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_LOCK_CONTROL - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_CLEANUP - OK - 0xFFFFF880045D4670 - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_CREATE_MAILSLOT - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_SECURITY - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_POWER - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SYSTEM_CONTROL - OK - 0xFFFFF880045E17E0 - C:\Windows\system32\DRIVERS\tdx.sys - Microsoft Corporation
       IRP_MJ_DEVICE_CHANGE - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_QUERY_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_SET_QUOTA - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation
       IRP_MJ_PNP_POWER - OK - 0xFFFFF800032B5B70 - C:\Windows\system32\ntoskrnl.exe - Microsoft Corporation

==========================================================================================

Ndis Handler

       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF88007268DF4 - StatusHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF88007268888 - PnPEventHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF880072681E4 - BindAdapterHandlerEx - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF8800726977C - UnbindAdapterHandlerEx - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF88007268874 - OpenAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF8800726872C - CloseAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF8800726897C - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF88007268D98 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083C6CF0 - NdisProtocolBlock - 0xFFFFF8800726878C - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88007268DF4 - StatusHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF8800522D4D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88007268D98 - ProtSendNetBufferListsComplete - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF8800726897C - ReceiveNetBufferLists - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF8800522D4D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF8800726878C - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\rspndr.sys - Microsoft Corporation
       0xFFFFFA80083F8010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF8800725541C - StatusHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF8800725480C - PnPEventHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF880072544C4 - BindAdapterHandlerEx - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF880072546F0 - UnbindAdapterHandlerEx - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF8800725463C - OpenAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF88007254774 - CloseAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF88007255FC8 - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF88007257000 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083DF880 - NdisProtocolBlock - 0xFFFFF8800725534C - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF8800725541C - StatusHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF8800522D4D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88007257000 - ProtSendNetBufferListsComplete - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88007255FC8 - ReceiveNetBufferLists - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF8800522D4D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF8800725534C - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndisuio.sys - Microsoft Corporation
       0xFFFFFA80083F7010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A0AAC - StatusHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A0368 - PnPEventHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF8800759FE54 - BindAdapterHandlerEx - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A0B50 - UnbindAdapterHandlerEx - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A0350 - OpenAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A02F0 - CloseAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A04FC - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A0908 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C2910 - NdisProtocolBlock - 0xFFFFF880075A69D0 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF880075A0AAC - StatusHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF8800522D4D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF880075A0908 - ProtSendNetBufferListsComplete - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF880075A04FC - ReceiveNetBufferLists - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF8800522D4D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF880075A69D0 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\lltdio.sys - Microsoft Corporation
       0xFFFFFA80083C88D0 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005724008 - OpenAdapterCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005724030 - CloseAdapterCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005716B48 - (Wan)SendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005716B48 - (Wan)TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005716BD4 - BindAdapterHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF880057172B8 - UnbindAdapterHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005724064 - PnPEventHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005717EBC - UnloadHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005717F0C - CoStatusHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005717FA8 - CoReceivePacketHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80074FBAB0 - NdisProtocolBlock - 0xFFFFF88005717824 - CoAfRegisterNotifyHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F80EB0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F81570 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001EFBE40 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF880053695D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF8800535DB7C - MiniportCoCreateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716750 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716750 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716750 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B48 - CmDeactivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B54 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001EFBE40 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF880053695D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F80EB0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF8800535DAEC - MiniportCoOidRequestHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F80EB0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F81570 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001EFBE40 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF880053695D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF8800535DB7C - MiniportCoCreateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF8800571F008 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF8800571F008 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF8800571F008 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF880057165A0 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001EFBE40 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF880053695D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F80EB0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF8800535DAEC - MiniportCoOidRequestHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757F010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005373AF0 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716750 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716750 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716750 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B48 - CmDeactivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B54 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757E010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005373AF0 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF8800571F008 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF8800571F008 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF8800571F008 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF880057165A0 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757C840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF880053D2D0C - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716750 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716750 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716750 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B48 - CmDeactivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B54 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007572010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF880053D2D0C - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF8800571F008 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF8800571F008 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF8800571F008 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF880057165A0 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF880050A8270 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716750 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716750 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716750 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B48 - CmDeactivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B54 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007571010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF880050A8270 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF8800571F008 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF8800571F008 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF8800571F008 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF880057165A0 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007553840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF880051D9954 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716750 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716750 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716750 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B48 - CmDeactivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B54 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075612A0 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88005716B48 - TransferDataCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88005716B48 - ReceiveCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88005717808 - RequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88005716B48 - ResetCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88005716B48 - StatusCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF880051D9954 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF8800571F008 - CoCreateVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF8800571F008 - CoDeleteVcHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF8800571F008 - CmActivateVcCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF880057165A0 - CoRequestCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88005716B48 - ProtSendCompleteHandler - C:\Windows\System32\Drivers\NDProxy.SYS - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D5AC4 - OpenAdapterCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D6050 - CloseAdapterCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053E4F28 - (Wan)SendCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053E5778 - (Wan)TransferDataCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D5BA4 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053E5468 - (Wan)ReceiveHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053E5904 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D611C - StatusHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D5B98 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053E4FF0 - ReceivePacketHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D5348 - BindAdapterHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D5DE0 - UnbindAdapterHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053D61E8 - PnPEventHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3730 - NdisProtocolBlock - 0xFFFFF880053DE550 - UnloadHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053CA820 - OpenAdapterCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053CAF70 - CloseAdapterCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053C7A00 - (Wan)SendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053AC620 - ResetCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053A8B10 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053C77B0 - (Wan)ReceiveHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053A35A0 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053AE5D0 - StatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053AB9D0 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053A80E0 - BindAdapterHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053ADBA0 - UnbindAdapterHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053A8980 - PnPEventHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053AC5A0 - UnloadHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053B92C0 - CoSendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053AE220 - CoStatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053B8190 - CoReceivePacketHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007390CF0 - NdisProtocolBlock - 0xFFFFF880053A7D80 - CoAfRegisterNotifyHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053C77B0 - ReceiveHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053A35A0 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053A8B10 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053AC620 - ResetCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053AE5D0 - StatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053AB9D0 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880051D9954 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CmActivateVcCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053A6360 - CoRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF880053C7A00 - ProtSendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053C77B0 - ReceiveHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053A35A0 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053A8B10 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053AC620 - ResetCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053AE5D0 - StatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053AB9D0 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880050A8270 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053A70A0 - CmActivateVcCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053A6360 - CoRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF880053C7A00 - ProtSendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007583010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053C77B0 - ReceiveHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053A35A0 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053A8B10 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053AC620 - ResetCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053AE5D0 - StatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053AB9D0 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053D2D0C - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CmActivateVcCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053A6360 - CoRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF880053C7A00 - ProtSendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007582840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F81920 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053C77B0 - ReceiveHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053A35A0 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053A8B10 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053AC620 - ResetCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053AE5D0 - StatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053AB9D0 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88005373AF0 - MiniportCoRequestHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053A70A0 - CmActivateVcCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053A6360 - CoRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF880053C7A00 - ProtSendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F80EB0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F81570 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053C77B0 - ReceiveHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053A35A0 - ReceiveCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053A8B10 - RequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001EFBE40 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053AC620 - ResetCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053AE5D0 - StatusHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053AB9D0 - StatusCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053695D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF8800535DB7C - MiniportCoCreateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053A70A0 - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053A70A0 - CmActivateVcCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053A6360 - CoRequestCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F81480 - ProtSendNetBufferListsComplete - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001EFBE40 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053695D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F80EB0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF880053C7A00 - ProtSendCompleteHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F49170 - OidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF8800535DAEC - MiniportCoOidRequestHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001F89560 - CoOidRequestCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007580010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DDCE30 - StatusHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DE7AB0 - PnPEventHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DDD6B0 - BindAdapterHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DE88D0 - UnbindAdapterHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DE6350 - OpenAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DE8850 - CloseAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DDC010 - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DDC3E0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A960 - NdisProtocolBlock - 0xFFFFF88004DDDB20 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88004DDCE30 - StatusHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF880053A3AD0 - WSendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88004DDC3E0 - ProtSendNetBufferListsComplete - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88004DDC010 - ReceiveNetBufferLists - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88004DDDB20 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581840 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DDCE30 - StatusHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DE7AB0 - PnPEventHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DDD6B0 - BindAdapterHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DE88D0 - UnbindAdapterHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DE6350 - OpenAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DE8850 - CloseAdapterCompleteHandlerEx - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DDC010 - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DDC3E0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8006FCDCF0 - NdisProtocolBlock - 0xFFFFF88004DDDB20 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88004DDCE30 - StatusHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF880053A3AD0 - WSendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88004DDC3E0 - ProtSendNetBufferListsComplete - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88004DDC010 - ReceiveNetBufferLists - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F80A60 - SavedSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88004DDDB20 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA8007581010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF8800201B550 - PnPEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF8800201A480 - BindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020026E0 - UnbindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020DD4F0 - OpenAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF88002002D10 - CloseAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF88002057400 - ReceiveNetBufferListsHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF8800205B720 - SendNetBufferListsCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80065B2490 - NdisProtocolBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880051A9210 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadSendCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadReceiveCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadDisconnectCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadForwardCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880021339F0 - TcpOffloadEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88002115C50 - TcpOffloadReceiveIndicateHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF8800205B720 - ProtSendNetBufferListsComplete - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88002057400 - ReceiveNetBufferLists - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880051A9210 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA80073C6010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880051A9210 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadSendCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadReceiveCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadDisconnectCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020D7D00 - TcpOffloadForwardCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880021339F0 - TcpOffloadEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88002115C50 - TcpOffloadReceiveIndicateHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF8800205B720 - ProtSendNetBufferListsComplete - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88002057400 - ReceiveNetBufferLists - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880051A9210 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800737B010 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880021401E0 - PnPEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF8800201A480 - BindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020026E0 - UnbindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020DD4F0 - OpenAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF88002002D10 - CloseAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF88002057400 - ReceiveNetBufferListsHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF8800205B720 - SendNetBufferListsCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471CE0 - NdisProtocolBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF88002140260 - PnPEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF8800201A480 - BindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020026E0 - UnbindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020DD4F0 - OpenAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF88002002D10 - CloseAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF88002057400 - ReceiveNetBufferListsHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF8800205B720 - SendNetBufferListsCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006471860 - NdisProtocolBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF8800522D4D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DD790 - TcpOffloadSendCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DD740 - TcpOffloadReceiveCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DD790 - TcpOffloadDisconnectCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DD790 - TcpOffloadForwardCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880021339F0 - TcpOffloadEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020DD690 - TcpOffloadReceiveIndicateHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF8800205B720 - ProtSendNetBufferListsComplete - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88002057400 - ReceiveNetBufferLists - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF8800522D4D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA800755D8D0 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF88002140220 - PnPEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF8800201A480 - BindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020026E0 - UnbindAdapterHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020DD4F0 - OpenAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF88002002D10 - CloseAdapterCompleteHandlerEx - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF88002057400 - ReceiveNetBufferListsHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF8800205B720 - SendNetBufferListsCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8006470850 - NdisProtocolBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001F80CF0 - (Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001F800A0 - TransferDataHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001EE4E70 - ReceiveCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001F83630 - ResetHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001F7D3A0 - RequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88002013C30 - StatusHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF8800522D4D0 - CancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DDC70 - InitiateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DDBB0 - TerminateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DDB60 - UpdateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DDB10 - InvalidateOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DDAC0 - QueryOffloadCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DD790 - TcpOffloadSendCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DD740 - TcpOffloadReceiveCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DD790 - TcpOffloadDisconnectCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DD790 - TcpOffloadForwardCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880021339F0 - TcpOffloadEventHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020DD690 - TcpOffloadReceiveIndicateHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001F7C620 - OidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF8800205B720 - ProtSendNetBufferListsComplete - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88002057400 - ReceiveNetBufferLists - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF8800522D4D0 - SavedCancelSendPacketsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001F80CF0 - Saved(Wan)SendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88002083AD0 - OidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF880020CD780 - DirectOidRequestCompleteHandler - C:\Windows\System32\drivers\tcpip.sys - Microsoft Corporation
       0xFFFFFA8007555680 - NdisOpenBlock - 0xFFFFF88001ECC350 - DirectOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720EC5C - SetOptionsHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800721D210 - SetFilterModuleOptionsHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720EC80 - AttachHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720F754 - DetachHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720F38C - RestartHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720F1D8 - PauseHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FEE8 - SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF88007209838 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FFD4 - CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF88007209558 - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FFC0 - ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FC60 - OidRequestHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF88007206CDC - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800721C6E8 - CancelOidRequestHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FDC0 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FDD4 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF880072099E8 - StatusHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FBBC - DirectOidRequestHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA80083C5010 - NdisFilterDriverBlock - 0xFFFFF8800720FC08 - DirectOidRequestCompleteHandler - C:\Windows\system32\DRIVERS\nwifi.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBA1D8 - AttachHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBA620 - DetachHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBA92C - RestartHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBA7F0 - PauseHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBC5D0 - SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBC0B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBCA68 - CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBC868 - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBC7A4 - ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBAEC0 - OidRequestHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBB5A4 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBB06C - CancelOidRequestHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBBED8 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBC018 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBBDCC - StatusHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBB950 - DirectOidRequestHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBBD28 - DirectOidRequestCompleteHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800713A830 - NdisFilterDriverBlock - 0xFFFFF88004DBB9EC - CancelDirectOidRequestHandler - C:\Windows\system32\DRIVERS\vwififlt.sys - Microsoft Corporation
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAD9BC - SetOptionsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADF20 - SetFilterModuleOptionsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAE184 - AttachHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADAB4 - DetachHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADA30 - RestartHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAD9E0 - PauseHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADC60 - SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAE680 - SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADF0C - CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADE0C - ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAE78C - ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAE5C8 - OidRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DAE454 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADB8C - CancelOidRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADC38 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADC4C - NetPnPEventHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800712A880 - NdisFilterDriverBlock - 0xFFFFF88004DADC0C - StatusHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004D87140 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004D90270 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88001F7C8F0 - NextReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88001EE4E70 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADF20 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADC60 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DAE680 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADF0C - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADE0C - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DAE78C - Characteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADC60 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DAE680 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADF0C - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADE0C - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DAE78C - SavedCharacteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DAE5C8 - OidRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DAE454 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADB8C - CancelRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADC38 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADC4C - NetPnPEventHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88004DADC0C - StatusHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800757A010 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004D87140 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004D90270 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88001F7C8F0 - NextReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88001EE4E70 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADF20 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADC60 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DAE680 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADF0C - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADE0C - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DAE78C - Characteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADC60 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DAE680 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADF0C - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADE0C - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DAE78C - SavedCharacteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DAE5C8 - OidRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DAE454 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADB8C - CancelRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADC38 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADC4C - NetPnPEventHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88004DADC0C - StatusHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576C80 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004D87140 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004D90270 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88001F7C8F0 - NextReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88001EE4E70 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADF20 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADC60 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DAE680 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADF0C - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADE0C - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DAE78C - Characteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADC60 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DAE680 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADF0C - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADE0C - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DAE78C - SavedCharacteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DAE5C8 - OidRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DAE454 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADB8C - CancelRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADC38 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADC4C - NetPnPEventHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88004DADC0C - StatusHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80075603E0 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88001F7C440 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004D87140 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88001EC85B0 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF880052309D0 - NextReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF8800522D4D0 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADF20 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADC60 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DAE680 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADF0C - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADE0C - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DAE78C - Characteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADC60 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DAE680 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADF0C - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADE0C - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DAE78C - SavedCharacteristics.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DAE5C8 - OidRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DAE454 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADB8C - CancelRequestHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADC38 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADC4C - NetPnPEventHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88004DADC0C - StatusHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762D010 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D8B920 - SetOptionsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D95610 - SetFilterModuleOptionsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D90880 - AttachHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D906F0 - DetachHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D9C6F0 - RestartHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D8E170 - PauseHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D870C0 - OidRequestHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D87010 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D9AAD0 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D9AAB0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8006F32B30 - NdisFilterDriverBlock - 0xFFFFF88004D94520 - StatusHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004DADC60 - NextSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88001F7C260 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88001EC85B0 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004DAE78C - NextReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004DADF0C - NextCancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D95610 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D87170 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D87140 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D89A70 - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D90270 - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D87170 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D87140 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D89A70 - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D90270 - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D870C0 - OidRequestHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D87010 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D9AAD0 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D9AAB0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88004D94520 - StatusHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007578A90 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004DADC60 - NextSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88001F7C260 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88001EC85B0 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004DAE78C - NextReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004DADF0C - NextCancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D95610 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D87170 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D87140 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D89A70 - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D90270 - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D87170 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D87140 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D89A70 - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D90270 - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D870C0 - OidRequestHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D87010 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D9AAD0 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D9AAB0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88004D94520 - StatusHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007576010 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004DADC60 - NextSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88001F7C260 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88001EC85B0 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004DAE78C - NextReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004DADF0C - NextCancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D95610 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D87170 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D87140 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D89A70 - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D90270 - Characteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D87170 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D87140 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D89A70 - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D90270 - SavedCharacteristics.ReceiveNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D870C0 - OidRequestHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D87010 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D9AAD0 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D9AAB0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88004D94520 - StatusHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007574010 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004DADC60 - NextSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88001F7C260 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88001EC85B0 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004DAE78C - NextReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004DADF0C - NextCancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D95610 - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D87170 - Characteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D87140 - Characteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D89A70 - Characteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D87170 - SavedCharacteristics.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D87140 - SavedCharacteristics.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D89A70 - SavedCharacteristics.CancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D870C0 - OidRequestHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D87010 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D9AAD0 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D9AAB0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88004D94520 - StatusHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800762C970 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7EBDC - SetFilterModuleOptionsHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E008 - AttachHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E380 - DetachHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E2DC - RestartHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E284 - PauseHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E5C4 - OidRequestHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E684 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E7DC - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E7F0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA8007134010 - NdisFilterDriverBlock - 0xFFFFF88004D7E7C8 - StatusHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D87170 - NextSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88001F7C260 - NextSendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88001EC85B0 - NextIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004DAE78C - NextReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D89A70 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D7EBDC - SetFilterModuleOptionalHandlers - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D7E5C4 - OidRequestHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D7E684 - OidRequestCompleteHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D7E7DC - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D7E7F0 - NetPnPEventHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88004D7E7C8 - StatusHandler - C:\Windows\system32\DRIVERS\wfplwf.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88001ED26A0 - FilterSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88001EC8520 - FilterIndicateReceiveNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800754E5C0 - NdisFilterBlock - 0xFFFFF88001EE4E80 - FilterCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E4328 - UnloadHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E4BB0 - HaltHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E4F54 - InitializeHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051D92D4 - ResetHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E6008 - ReturnPacketHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E6068 - CoActivateVcHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E60B0 - CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E60F8 - CoSendPacketsHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051D9954 - CoRequestHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E6068 - MiniportCharacteristics.CoActivateVcHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF880051E60B0 - MiniportCharacteristics.CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073ABCD0 - NdisMiniDriverBlock - 0xFFFFF88001EC9CF0 - CoOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050BC400 - UnloadHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050AE9E0 - HaltHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050C01B0 - InitializeHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050AABF0 - ResetHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050B5DB0 - ReturnPacketHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050BC3B0 - CoActivateVcHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050BC360 - CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050B62D0 - CoSendPacketsHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050A8270 - CoRequestHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050BC3B0 - MiniportCharacteristics.CoActivateVcHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF880050BC360 - MiniportCharacteristics.CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A2020 - NdisMiniDriverBlock - 0xFFFFF88001EC9CF0 - CoOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DD2B4 - UnloadHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053D24B4 - HaltHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DDAB4 - InitializeHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053D2604 - ResetHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DF008 - ReturnPacketHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DF150 - CoActivateVcHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DF198 - CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DF1E0 - CoSendPacketsHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053D2D0C - CoRequestHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DF150 - MiniportCharacteristics.CoActivateVcHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF880053DF198 - MiniportCharacteristics.CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A3A70 - NdisMiniDriverBlock - 0xFFFFF88001EC9CF0 - CoOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053C4B00 - UnloadHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053ADDA0 - HaltHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053CA350 - InitializeHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC9A0 - ReconfigureHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC8D0 - ResetHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053A36F0 - ReturnPacketHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053A3AD0 - SendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC850 - CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC7D0 - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC750 - CoActivateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC6D0 - CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AE670 - CoSendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053A6760 - CoRequestHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC850 - MiniportCharacteristics.CoCreateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC7D0 - MiniportCharacteristics.CoDeleteVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC750 - MiniportCharacteristics.CoActivateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF880053AC6D0 - MiniportCharacteristics.CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073909B0 - NdisMiniDriverBlock - 0xFFFFF88001EC9CF0 - CoOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF88005390120 - UnloadHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF88005390010 - HaltHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF8800538E500 - InitializeHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF88005376470 - ResetHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF8800537F3D0 - ReturnPacketHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF8800538A930 - CoActivateVcHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF8800538A930 - CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF880053805A0 - CoSendPacketsHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF88005373AF0 - CoRequestHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF8800538A930 - MiniportCharacteristics.CoActivateVcHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF8800538A930 - MiniportCharacteristics.CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA800738C8D0 - NdisMiniDriverBlock - 0xFFFFF88001EC9CF0 - CoOidRequestHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DB7C - CoCreateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DB7C - CoDeleteVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DB7C - CoActivateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DB7C - CoDeactivateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005369418 - CoSendNetBufferListsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DAEC - CoOidRequestHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535E31C - CmCreateVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535E59C - CmDeleteVcHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DD18 - CmOpenAfHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DDA4 - CmCloseAfHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535E8A8 - CmRegisterSapHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535EA10 - CmDeregisterSapHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535EE7C - CmMakeCallHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535EDDC - CmCloseCallHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005369650 - CmIncomingCallCompleteHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800536983C - CmActivateVcCompleteHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005369A50 - CmDeactivateVcCompleteHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005369B38 - CmModifyCallQoSHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535F54C - CmOidRequestHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535F598 - CmOidRequestCompleteHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535F598 - CmNotifyCloseAfCompleteHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005368138 - SetOptionsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005367C60 - InitializeHandlerEx - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535D2D4 - HaltHandlerEx - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005367328 - MiniportDriverCharacteristics.UnloadHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535D4DC - PauseHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535D550 - RestartHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF880053695D0 - SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF880053695DC - ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF880053695D0 - CancelSendHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535D58C - CheckForHangHandlerEx - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535DB70 - ResetHandlerEx - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF88005368364 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535F598 - ShutdownHandlerEx - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA8006F27440 - NdisMiniDriverBlock - 0xFFFFF8800535F598 - CancelOidRequestHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800524DDE0 - SetOptionsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF88005221CE0 - InitializeHandlerEx - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D300 - HaltHandlerEx - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D3D0 - MiniportDriverCharacteristics.UnloadHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D220 - PauseHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D2E0 - RestartHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF88005225BD0 - OidRequestHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522E0F0 - SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF880052309D0 - ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D4D0 - CancelSendHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D4C0 - CheckForHangHandlerEx - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF880052220E0 - ResetHandlerEx - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF88005222220 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D360 - ShutdownHandlerEx - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80072FFC60 - NdisMiniDriverBlock - 0xFFFFF8800522D400 - CancelOidRequestHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A7F84 - InitializeHandlerEx - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A8D80 - HaltHandlerEx - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051B87DC - MiniportDriverCharacteristics.UnloadHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A8ED8 - PauseHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A9000 - RestartHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A8CCC - OidRequestHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A8D54 - SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A8D44 - ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A9210 - CancelSendHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051AC7AC - CheckForHangHandlerEx - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051B8944 - DevicePnPEventNotifyHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A90FC - ShutdownHandlerEx - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716B020 - NdisMiniDriverBlock - 0xFFFFF880051A87F8 - CancelOidRequestHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F82730 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF880051E6008 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF880051E6008 - SynchronousReturnPacketHandler - C:\Windows\system32\DRIVERS\rassstp.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073AE1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F82730 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF880050B5DB0 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF880050B5DB0 - SynchronousReturnPacketHandler - C:\Windows\system32\DRIVERS\raspptp.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A91A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F82730 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF880053DF008 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF880053DF008 - SynchronousReturnPacketHandler - C:\Windows\system32\DRIVERS\raspppoe.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073A51A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7CAB0 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F82B10 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F86C30 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F880D0 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF880053A3AD0 - WSendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7CAB0 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF880053A36F0 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88004D89A70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88004DAE680 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88004DADE0C - Next.IndicateNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88004DAE78C - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88004D87170 - Next.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800739F1A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7CAB0 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F82B10 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F86C30 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F880D0 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF880053A3AD0 - WSendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7CAB0 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF880053A36F0 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88004D89A70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88004DAE680 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88004DADE0C - Next.IndicateNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88004DAE78C - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88004D87170 - Next.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA800739D1A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7CAB0 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F82B10 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F86C30 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F880D0 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF880053A3AD0 - WSendPacketsHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7CAB0 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF880053A36F0 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\ndiswan.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88004D89A70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88004DAE680 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88004DADE0C - Next.IndicateNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88004DAE78C - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88004D87170 - Next.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA80073951A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F80A60 - SendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F82730 - DeferredSendHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7CE60 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF8800537F3D0 - MiniportReturnPacketHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF8800537F3D0 - SynchronousReturnPacketHandler - C:\Windows\system32\DRIVERS\rasl2tp.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7CD70 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001EE4E70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F7C8F0 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073921A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F06E90 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F4D910 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF8800535F598 - ShutdownHandler(Ex) - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF880053695D0 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF880053695DC - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF880053695D0 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF880053695DC - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\AgileVpn.sys - Microsoft Corporation
       0xFFFFFA800738A1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001EC03B0 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF8800522D360 - ShutdownHandler(Ex) - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF8800522D4D0 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF880052309D0 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\yk62x64.sys - 
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88004D89A70 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88004DAE680 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88004DADE0C - Next.IndicateNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88004DAE78C - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\klim6.sys - Kaspersky Lab ZAO
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88004D87170 - Next.SendNetBufferListsHandler - C:\Windows\system32\DRIVERS\pacer.sys - Microsoft Corporation
       0xFFFFFA80073171A0 - NdisMiniportBlock - 0xFFFFF88001F85010 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF880051A90FC - ShutdownHandler(Ex) - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF880051A9210 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF880051A8D44 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF880051A9210 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF880051A8D44 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071701A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF880051A90FC - ShutdownHandler(Ex) - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF880051A9210 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF880051A8D44 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF880051A9210 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF880051A8D44 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA800716E1A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F06E90 - PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7CFA0 - SendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F583B0 - SendResourcesHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F58C80 - ResetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F86650 - EthRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F87280 - TrRxIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F86570 - EthRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F871F0 - TrRxCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F47BB0 - StatusHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F4DBD0 - StatusCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F81720 - TDCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F585C0 - QueryCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F584D0 - SetCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F803C0 - WanSendCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F528A0 - WanRcvHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F527D0 - WanRcvCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - SavedPacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001EE4430 - NextCancelSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - SavedNextSendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F4D910 - IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7C1B0 - SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F498C0 - SavedIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - NextSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F05FC0 - FinalSendPacketsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF880051A90FC - ShutdownHandler(Ex) - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F45900 - TopIndicateLoopbackNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - Ndis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F840C0 - SynchronousReturnPacketHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF880051A9210 - NoFilter.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - NoFilter.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - NoFilter.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF880051A8D44 - NoFilter.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7C440 - NoFilter.SendNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF880051A9210 - Next.CancelSend(Packets)Handler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F7C260 - Next.SendNetBufferListsCompleteHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.IndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001EC85B0 - Next.SaveIndicateNetBufferListsHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF880051A8D44 - Next.ReturnNetBufferListsHandler - C:\Windows\system32\DRIVERS\tunnel.sys - Microsoft Corporation
       0xFFFFFA80071381A0 - NdisMiniportBlock - 0xFFFFF88001F5B340 - TopNdis5PacketIndicateHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800711A900 - NdisIfProviderBlock - 0xFFFFF88004DDC4F0 - QueryObjectHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800711A900 - NdisIfProviderBlock - 0xFFFFF88004DE8610 - SetObjectHandler - C:\Windows\system32\DRIVERS\wanarp.sys - Microsoft Corporation
       0xFFFFFA800639F160 - NdisIfProviderBlock - 0xFFFFF88001EC5DA0 - QueryObjectHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800639F160 - NdisIfProviderBlock - 0xFFFFF88001EE9C20 - SetObjectHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800639F1C0 - NdisIfProviderBlock - 0xFFFFF88001EC2C90 - QueryObjectHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation
       0xFFFFFA800639F1C0 - NdisIfProviderBlock - 0xFFFFF88001EE9C20 - SetObjectHandler - C:\Windows\system32\drivers\ndis.sys - Microsoft Corporation

==========================================================================================

IE Plugin

       Browser Helper Objects - Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll - Kaspersky Lab ZAO - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
       Browser Helper Objects - Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll - Kaspersky Lab ZAO - {73455575-E40C-433C-9784-C78DC7761455}
       Browser Helper Objects - Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll - Kaspersky Lab ZAO - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
       Browser Helper Objects - URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll - Kaspersky Lab ZAO - {E33CF602-D945-461A-83F0-819F76A199F8}
       Browser Helper Objects(Wow64) - Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll - Adobe Systems Incorporated - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
       Browser Helper Objects(Wow64) - Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll - Kaspersky Lab ZAO - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
       Browser Helper Objects(Wow64) - Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll - Kaspersky Lab ZAO - {73455575-E40C-433C-9784-C78DC7761455}
       Browser Helper Objects(Wow64) - Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll - Oracle Corporation - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
       Browser Helper Objects(Wow64) - Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll - Kaspersky Lab ZAO - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
       Browser Helper Objects(Wow64) - Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll - Oracle Corporation - {DBC80044-A445-435b-BC74-9C25C1C588A9}
       Browser Helper Objects(Wow64) - URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll - Kaspersky Lab ZAO - {E33CF602-D945-461A-83F0-819F76A199F8}
       Browser Extensions - Virtuln klvesnice -  -  - {0C4CC089-D306-440D-9772-464E226F6539}
       Browser Extensions - Kontrola adres URL -  -  - {CCF151D8-D089-449F-A5A4-D9909053F20F}
       Browser Extensions(Wow64) - Virtuln klvesnice -  -  - {0C4CC089-D306-440D-9772-464E226F6539}
       Browser Extensions(Wow64) - HP Smart Print - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe - Hewlett-Packard - {22CC3EBD-C286-43aa-B8E6-06B115F74162}
       Browser Extensions(Wow64) - Zdroje informac -  -  - {92780B25-18CC-41C8-B9BE-3C9C571A8263}
       Browser Extensions(Wow64) - Kontrola adres URL -  -  - {CCF151D8-D089-449F-A5A4-D9909053F20F}
       URLSearchHooks - Microsoft Url Search Hook - C:\Windows\System32\ieframe.dll - Microsoft Corporation - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
       ActiveX -  -  -  - {0C4CC089-D306-440D-9772-464E226F6539}
       ActiveX -  -  -  - {18DF081C-E8AD-4283-A596-FA578C2EBDC3}
       ActiveX -  -  -  - {39125640-8D80-11DC-A2FE-C5C455D89593}
       ActiveX - Content Blocker Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll - Kaspersky Lab ZAO - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F}
       ActiveX - Windows Media Player - C:\Windows\System32\wmp.dll - Microsoft Corporation - {6BF52A52-394A-11D3-B153-00C04F79FAA6}
       ActiveX - Virtual Keyboard Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll - Kaspersky Lab ZAO - {73455575-E40C-433C-9784-C78DC7761455}
       ActiveX -  -  -  - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}
       ActiveX -  -  -  - {7AEFE841-DCA1-4A95-80CB-BE935D020102}
       ActiveX -  -  -  - {9793fbbf-e9db-3b01-b322-3430cbcf3cd5}
       ActiveX - Safe Money Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\OnlineBanking\online_banking_bho.dll - Kaspersky Lab ZAO - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9}
       ActiveX -  -  -  - {C3101A8B-0EE1-4612-BFE9-41FFC1A3C19D}
       ActiveX -  -  -  - {C442AC41-9200-4770-8CC0-7CDB4F245C55}
       ActiveX - FilterButtonHandler Class - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll - Kaspersky Lab ZAO - {CCF151D8-D089-449F-A5A4-D9909053F20F}
       ActiveX - Microsoft Url Search Hook - C:\Windows\System32\ieframe.dll - Microsoft Corporation - {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
       ActiveX - Shockwave Flash Object - C:\Windows\System32\Macromed\Flash\Flash64_11_5_502_149.ocx - Adobe Systems, Inc. - {D27CDB6E-AE6D-11CF-96B8-444553540000}
       ActiveX -  -  -  - {DBC80044-A445-435B-BC74-9C25C1C588A9}
       ActiveX - Microsoft Silverlight - c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll -  Microsoft Corporation - {DFEAF541-F3E1-4C24-ACAC-99C30715084A}
       ActiveX - URL Advisor Plugin - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\IEExt\UrlAdvisor\klwtbbho.dll - Kaspersky Lab ZAO - {E33CF602-D945-461A-83F0-819F76A199F8}
       ActiveX -  -  -  - {EBA7A1E6-E69D-4BA5-B291-95782A004604}
       Distribution Units(Wow64) - Flash64_11_5_502_149.ocx - C:\Windows\System32\Macromed\Flash\Flash64_11_5_502_149.ocx - Adobe Systems, Inc. - {D27CDB6E-AE6D-11CF-96B8-444553540000}

==========================================================================================

IE Shell

       Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
       E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
       Pidat do Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\ie_banner_deny.htm

==========================================================================================

Spi

       @%SystemRoot%\System32\wshtcpip.dll,-60100 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
       @%SystemRoot%\System32\wshtcpip.dll,-60101 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
       @%SystemRoot%\System32\wshtcpip.dll,-60102 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {E70F1AA0-AB8B-11CF-8CA3-00805F48A192}
       @%SystemRoot%\System32\wship6.dll,-60100 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
       @%SystemRoot%\System32\wship6.dll,-60101 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
       @%SystemRoot%\System32\wship6.dll,-60102 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {F9EAB0C0-26D4-11D0-BBBF-00AA006C34E4}
       @%SystemRoot%\System32\wshqos.dll,-100 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\System32\wshqos.dll,-101 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\System32\wshqos.dll,-102 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\System32\wshqos.dll,-103 - C:\Windows\System32\mswsock.dll - Microsoft Corporation - {9D60A9E0-337A-11D0-BD88-0000C082E69A}
       @%SystemRoot%\system32\nlasvc.dll,-1000 - C:\Windows\System32\nlaapi.dll - Microsoft Corporation
       @%SystemRoot%\system32\napinsp.dll,-1000 - C:\Windows\System32\NapiNSP.dll - Microsoft Corporation
       @%SystemRoot%\system32\pnrpnsp.dll,-1000 - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
       @%SystemRoot%\system32\pnrpnsp.dll,-1001 - C:\Windows\System32\pnrpnsp.dll - Microsoft Corporation
       @%SystemRoot%\system32\wshtcpip.dll,-60103 - C:\Windows\System32\mswsock.dll - Microsoft Corporation
       NTDS - C:\Windows\System32\winrnr.dll - Microsoft Corporation

==========================================================================================

Hosts File

       


==========================================================================================

Startup

       RtHDVCpl - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe - Realtek Semiconductor - [\Registry\Machine\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RtHDVCpl]
       NUSB3MON - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe - NEC Electronics Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run NUSB3MON]
       AVP - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe - Kaspersky Lab ZAO - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run AVP]
       Adobe ARM - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe - Adobe Systems Incorporated - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run Adobe ARM]
       SunJavaUpdateSched - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe - Sun Microsystems, Inc. - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run SunJavaUpdateSched]
       cz.seznam.software.autoupdate - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\szninstall.exe -  - [\REGISTRY\USER\S-1-5-21-1232842137-2361927944-3935939770-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run cz.seznam.software.autoupdate]
       Seznam Postak - C:\Users\JerryMX\AppData\Roaming\Seznam.cz\bin\postak.exe -  - [\REGISTRY\USER\S-1-5-21-1232842137-2361927944-3935939770-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Seznam Postak]
        -  -  - [\REGISTRY\USER\S-1-5-21-1232842137-2361927944-3935939770-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ]
       Google Update - C:\Users\JerryMX\AppData\Local\Google\Update\GoogleUpdate.exe - Google Inc. - [\REGISTRY\USER\S-1-5-21-1232842137-2361927944-3935939770-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Google Update]
       Wireless Utility.lnk - C:\Program Files (x86)\EDIMAX\Common\RaUI.exe - Edimax Technology Co., Ltd. - [C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Utility.lnk]
       Shell - explorer.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Shell]
       Userinit - C:\Windows\system32\userinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon Userinit]
       Shell - explorer.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon Shell]
       Userinit - userinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon Userinit]
       HP1100LM - C:\Windows\system32\HP1100LM.DLL -  - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors HP1100LM]
       Local Port - C:\Windows\system32\localspl.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Local Port]
       Microsoft Shared Fax Monitor - C:\Windows\system32\FXSMON.DLL - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Microsoft Shared Fax Monitor]
       PDF reDirect Monitor - C:\Windows\system32\PDFreDirectMon64.dll -  - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors PDF reDirect Monitor]
       Standard TCP/IP Port - C:\Windows\system32\tcpmon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors Standard TCP/IP Port]
       USB Monitor - C:\Windows\system32\usbmon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors USB Monitor]
       WSD Port - C:\Windows\system32\WSDMon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Monitors WSD Port]
       Internet Print Provider - C:\Windows\system32\inetpp.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Providers Internet Print Provider]
       LanMan Print Services - C:\Windows\system32\win32spl.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Print\Providers LanMan Print Services]
       clbcatq - C:\Windows\System32\clbcatq.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs clbcatq]
       ole32 - C:\Windows\System32\ole32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs ole32]
       advapi32 - C:\Windows\System32\advapi32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs advapi32]
       COMDLG32 - C:\Windows\System32\comdlg32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs COMDLG32]
       DllDirectory32 - C:\Windows\system32\ -  - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs DllDirectory32]
       gdi32 - C:\Windows\System32\gdi32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs gdi32]
       IERTUTIL - C:\Windows\System32\iertutil.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs IERTUTIL]
       IMAGEHLP - C:\Windows\System32\imagehlp.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs IMAGEHLP]
       IMM32 - C:\Windows\System32\imm32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs IMM32]
       kernel32 - C:\Windows\System32\kernel32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs kernel32]
       LPK - C:\Windows\System32\lpk.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs LPK]
       MSCTF - C:\Windows\System32\msctf.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs MSCTF]
       MSVCRT - C:\Windows\System32\msvcrt.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs MSVCRT]
       NORMALIZ - C:\Windows\System32\normaliz.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs NORMALIZ]
       NSI - C:\Windows\System32\nsi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs NSI]
       OLEAUT32 - C:\Windows\System32\oleaut32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs OLEAUT32]
       PSAPI - C:\Windows\System32\psapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs PSAPI]
       rpcrt4 - C:\Windows\System32\rpcrt4.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs rpcrt4]
       sechost - C:\Windows\System32\sechost.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs sechost]
       Setupapi - C:\Windows\System32\setupapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs Setupapi]
       SHELL32 - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs SHELL32]
       SHLWAPI - C:\Windows\System32\shlwapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs SHLWAPI]
       URLMON - C:\Windows\System32\urlmon.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs URLMON]
       user32 - C:\Windows\System32\user32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs user32]
       USP10 - C:\Windows\System32\usp10.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs USP10]
       WININET - C:\Windows\System32\wininet.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs WININET]
       WLDAP32 - C:\Windows\System32\Wldap32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs WLDAP32]
       WS2_32 - C:\Windows\System32\ws2_32.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs WS2_32]
       DifxApi - C:\Windows\System32\difxapi.dll - Microsoft Corporation - [\Registry\Machine\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs DifxApi]
       syncui.dll(BriefcaseMenu) - C:\Windows\System32\syncui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers BriefcaseMenu]
       shellex.dll(Kaspersky Anti-Virus) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\shellex.dll - Kaspersky Lab ZAO - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Kaspersky Anti-Virus]
       shell32.dll(Open With) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Open With]
       shell32.dll(Open With EncryptionMenu) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Open With EncryptionMenu]
       ntshrui.dll(Sharing) - C:\Windows\System32\ntshrui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers Sharing]
       RarExt.dll(WinRAR) - C:\Program Files\WinRAR\RarExt.dll - Alexander Roshal - [\Registry\Machine\SOFTWARE\Classes\*\shellex\ContextMenuHandlers WinRAR]
       shell32.dll(CopyAsPathMenu) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers CopyAsPathMenu]
       mbamext.dll(MBAMShlExt) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll - Malwarebytes Corporation - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers MBAMShlExt]
       shell32.dll(SendTo) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers SendTo]
       syncui.dll(BriefcaseMenu) - C:\Windows\System32\syncui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers BriefcaseMenu]
       shellex.dll(Kaspersky Anti-Virus) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\x64\shellex.dll - Kaspersky Lab ZAO - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers Kaspersky Anti-Virus]
       shell32.dll(Library Location) - C:\Windows\System32\shell32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers Library Location]
       mbamext.dll(MBAMShlExt) - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll - Malwarebytes Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers MBAMShlExt]
       cscui.dll(Offline Files) - C:\Windows\System32\cscui.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers Offline Files]
       RarExt.dll(WinRAR) - C:\Program Files\WinRAR\RarExt.dll - Alexander Roshal - [\Registry\Machine\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers WinRAR]
       Microsoft Windows Media Player(>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
       Internet Explorer(>{26923b43-4d38-484f-9b9e-de460746276c}) - C:\Windows\System32\ie4uinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components >{26923b43-4d38-484f-9b9e-de460746276c}]
       Browser Customizations(>{60B49E34-C7CC-11D0-8953-00A0C90347FF}) - C:\Windows\System32\iedkcs32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components >{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
       Themes Setup({2C7339CF-2B09-4501-B3F3-F3508C9228ED}) - C:\Windows\System32\regsvr32.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
       Microsoft Windows Media Player({6BF52A52-394A-11d3-B153-00C04F79FAA6}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {6BF52A52-394A-11d3-B153-00C04F79FAA6}]
       Windows Desktop Update({89820200-ECBD-11cf-8B85-00AA005B4340}) - C:\Windows\system32\regsvr32.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {89820200-ECBD-11cf-8B85-00AA005B4340}]
       Web Platform Customizations({89820200-ECBD-11cf-8B85-00AA005B4383}) - C:\Windows\System32\ie4uinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {89820200-ECBD-11cf-8B85-00AA005B4383}]
       ({89B4C1CD-B018-4511-B0A1-5476DBF70820}) - C:\Windows\System32\mscories.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Microsoft\Active Setup\Installed Components {89B4C1CD-B018-4511-B0A1-5476DBF70820}]
       Microsoft Windows Media Player(>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components >{22d6f312-b0f6-11d0-94ab-0080c74c7e95}]
       Internet Explorer(>{26923b43-4d38-484f-9b9e-de460746276c}) - C:\Windows\SysWOW64\ie4uinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components >{26923b43-4d38-484f-9b9e-de460746276c}]
       Browser Customizations(>{60B49E34-C7CC-11D0-8953-00A0C90347FF}) - C:\Windows\SysWOW64\iedkcs32.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components >{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
       Themes Setup({2C7339CF-2B09-4501-B3F3-F3508C9228ED}) - C:\Windows\System32\regsvr32.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {2C7339CF-2B09-4501-B3F3-F3508C9228ED}]
       Microsoft Windows Media Player({6BF52A52-394A-11d3-B153-00C04F79FAA6}) - C:\Windows\System32\unregmp2.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {6BF52A52-394A-11d3-B153-00C04F79FAA6}]
       Web Folders({73FA19D0-2D75-11D2-995D-00C04F98BBC9}) -  -  - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {73FA19D0-2D75-11D2-995D-00C04F98BBC9}]
       Windows Desktop Update({89820200-ECBD-11cf-8B85-00AA005B4340}) - C:\Windows\system32\regsvr32.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {89820200-ECBD-11cf-8B85-00AA005B4340}]
       Web Platform Customizations({89820200-ECBD-11cf-8B85-00AA005B4383}) - C:\Windows\SysWOW64\ie4uinit.exe - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {89820200-ECBD-11cf-8B85-00AA005B4383}]
       ({89B4C1CD-B018-4511-B0A1-5476DBF70820}) - C:\Windows\SysWOW64\mscories.dll - Microsoft Corporation - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {89B4C1CD-B018-4511-B0A1-5476DBF70820}]
       Google Chrome({8A69D345-D564-463c-AFF1-A69D9E530F96}) - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\Installer\chrmstp.exe - Google Inc. - [\Registry\Machine\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components {8A69D345-D564-463c-AFF1-A69D9E530F96}]

==========================================================================================

Service

       AdobeARMservice - Started - Automatic - "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" - Adobe Systems Incorporated -  - 
       AdobeFlashPlayerUpdateSvc - Stopped - Manual - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe - Adobe Systems Incorporated -  - 
       AeLookupSvc - Started - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       ALG - Stopped - Manual - C:\Windows\System32\alg.exe - Microsoft Corporation -  - 
       AppIDSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       Appinfo - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       AppMgmt - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       aspnet_state - Stopped - Manual - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe - Microsoft Corporation -  - 
       AudioEndpointBuilder - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       AudioSrv - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       AVP - Started - Automatic - "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" -r - Kaspersky Lab ZAO -  - 
       AxInstSV - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k AxInstSVGroup - Microsoft Corporation -  - 
       BDESVC - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       BFE - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       BITS - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       Browser - Started - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       bthserv - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k bthsvcs - Microsoft Corporation -  - 
       CertPropSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       clr_optimization_v2.0.50727_32 - Stopped - Disabled - C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe - Microsoft Corporation -  - 
       clr_optimization_v2.0.50727_64 - Stopped - Disabled - C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe - Microsoft Corporation -  - 
       clr_optimization_v4.0.30319_32 - Stopped - Automatic - C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe - Microsoft Corporation -  - 
       clr_optimization_v4.0.30319_64 - Stopped - Automatic - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe - Microsoft Corporation -  - 
       COMSysApp - Stopped - Manual - C:\Windows\syswow64\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} - Microsoft Corporation -  - 
       CryptSvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       CscService - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       DcomLaunch - Started - Automatic - C:\Windows\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       defragsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k defragsvc - Microsoft Corporation -  - 
       Dhcp - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       Dnscache - Started - Automatic - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       dot3svc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       DPS - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       EapHost - Started - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       EFS - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       ehRecvr - Stopped - Manual - C:\Windows\ehome\ehrecvr.exe - Microsoft Corporation -  - 
       ehSched - Stopped - Manual - C:\Windows\ehome\ehsched.exe - Microsoft Corporation -  - 
       eventlog - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       EventSystem - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Fax - Stopped - Manual - C:\Windows\System32\FXSSVC.exe - Microsoft Corporation -  - 
       fdPHost - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       FDResPub - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       FontCache - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       FontCache3.0.0.0 - Stopped - Manual - C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe - Microsoft Corporation -  - 
       gpsvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k GPSvcGroup - Microsoft Corporation -  - 
       gupdate - Stopped - Automatic - "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc - Google Inc. -  - 
       gupdatem - Stopped - Manual - "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc - Google Inc. -  - 
       gusvc - Stopped - Manual - "C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe" - Google -  - 
       hidserv - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       hkmsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       HomeGroupListener - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       HomeGroupProvider - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       HPSIService - Started - Automatic - C:\Windows\System32\HPSIsvc.exe - HP -  - 
       idsvc - Stopped - Manual - "C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe" - Microsoft Corporation -  - 
       IKEEXT - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       IPBusEnum - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       iphlpsvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k NetSvcs - Microsoft Corporation -  - 
       KeyIso - Started - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       KtmRm - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k NetworkServiceAndNoImpersonation - Microsoft Corporation -  - 
       LanmanServer - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       LanmanWorkstation - Started - Automatic - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       lltdsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       lmhosts - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       Mcx2Svc - Stopped - Disabled - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       MDM - Started - Automatic - "C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe" - Microsoft Corporation -  - 
       MMCSS - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       MozillaMaintenance - Stopped - Manual - "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" - Mozilla Foundation -  - 
       MpsSvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       MSDTC - Stopped - Manual - C:\Windows\System32\msdtc.exe - Microsoft Corporation -  - 
       MSiSCSI - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       msiserver - Stopped - Manual - C:\Windows\syswow64\msiexec.exe /V - Microsoft Corporation -  - 
       napagent - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       Netlogon - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       Netman - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       NetMsmqActivator - Stopped - Disabled - "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator - Microsoft Corporation -  - 
       NetPipeActivator - Stopped - Disabled - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe - Microsoft Corporation -  - 
       netprofm - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       NetTcpActivator - Stopped - Disabled - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe - Microsoft Corporation -  - 
       NetTcpPortSharing - Stopped - Disabled - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe - Microsoft Corporation -  - 
       NlaSvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       nsi - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       nvsvc - Started - Automatic - C:\Windows\System32\nvvsvc.exe - NVIDIA Corporation -  - 
       nvUpdatusService - Started - Automatic - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - NVIDIA Corporation -  - 
       odserv - Stopped - Manual - "C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE" - Microsoft Corporation -  - 
       ose - Stopped - Manual - "C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE" - Microsoft Corporation -  - 
       p2pimsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       p2psvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       PcaSvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       PeerDistSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k PeerDist - Microsoft Corporation -  - 
       PerfHost - Stopped - Manual - C:\Windows\SysWOW64\perfhost.exe - Microsoft Corporation -  - 
       pla - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 
       PlugPlay - Started - Automatic - C:\Windows\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       PnkBstrA - Started - Automatic - C:\Windows\syswow64\PnkBstrA.exe -  -  - 
       PNRPAutoReg - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       PNRPsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServicePeerNet - Microsoft Corporation -  - 
       PolicyAgent - Started - Manual - C:\Windows\syswow64\svchost.exe -k NetworkServiceNetworkRestricted - Microsoft Corporation -  - 
       Power - Started - Automatic - C:\Windows\syswow64\svchost.exe -k DcomLaunch - Microsoft Corporation -  - 
       ProfSvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       ProtectedStorage - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       PSI_SVC_2 - Started - Automatic - "c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe" - Protexis Inc. -  - 
       QWAVE - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       RalinkRegistryWriter - Started - Automatic - C:\Program Files (x86)\EDIMAX\Common\RalinkRegistryWriter.exe -  -  - 
       RasAuto - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       RasMan - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       RemoteAccess - Stopped - Disabled - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       RemoteRegistry - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k regsvc - Microsoft Corporation -  - 
       RpcEptMapper - Started - Automatic - C:\Windows\syswow64\svchost.exe -k RPCSS - Microsoft Corporation -  - 
       RpcLocator - Stopped - Manual - C:\Windows\System32\Locator.exe - Microsoft Corporation -  - 
       RpcSs - Started - Automatic - C:\Windows\syswow64\svchost.exe -k rpcss - Microsoft Corporation -  - 
       SamSs - Started - Automatic - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       SCardSvr - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       Schedule - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SCPolicySvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SDRSVC - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k SDRSVC - Microsoft Corporation -  - 
       SearchIndexer - Stopped - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       seclogon - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SENS - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SensrSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       ServiceLayer - Stopped - Manual - "C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe" - Nokia -  - 
       SessionEnv - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SharedAccess - Stopped - Disabled - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       ShellHWDetection - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       SkypeUpdate - Stopped - Automatic - "C:\Program Files (x86)\Skype\Updater\Updater.exe" - Skype Technologies -  - 
       SNMPTRAP - Stopped - Manual - C:\Windows\System32\snmptrap.exe - Microsoft Corporation -  - 
       Spooler - Started - Automatic - C:\Windows\System32\spoolsv.exe - Microsoft Corporation -  - 
       sppsvc - Started - Automatic - C:\Windows\System32\sppsvc.exe - Microsoft Corporation -  - 
       sppuinotify - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       SSDPSRV - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       SstpSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Steam Client Service - Stopped - Manual - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService - Valve Corporation -  - 
       Stereo Service - Started - Automatic - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe - NVIDIA Corporation -  - 
       stisvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k imgsvc - Microsoft Corporation -  - 
       swprv - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k swprv - Microsoft Corporation -  - 
       SysMain - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       TabletInputService - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       TapiSrv - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       TBS - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       TermService - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       Themes - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       THREADORDER - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       TrkWks - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       TrustedInstaller - Stopped - Manual - C:\Windows\servicing\TrustedInstaller.exe - Microsoft Corporation -  - 
       UI0Detect - Stopped - Manual - C:\Windows\System32\UI0Detect.exe - Microsoft Corporation -  - 
       UmRdpService - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       upnphost - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       UxSms - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       VaultSvc - Stopped - Manual - C:\Windows\System32\lsass.exe - Microsoft Corporation -  - 
       vds - Stopped - Manual - C:\Windows\System32\vds.exe - Microsoft Corporation -  - 
       VSS - Stopped - Manual - C:\Windows\System32\VSSVC.exe - Microsoft Corporation -  - 
       W32Time - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       WatAdminSvc - Stopped - Manual - C:\Windows\System32\Wat\WatAdminSvc.exe - Microsoft Corporation -  - 
       wbengine - Stopped - Manual - "C:\Windows\system32\wbengine.exe" - Microsoft Corporation -  - 
       WbioSrvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k WbioSvcGroup - Microsoft Corporation -  - 
       wcncsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceAndNoImpersonation - Microsoft Corporation -  - 
       WcsPlugInService - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k wcssvc - Microsoft Corporation -  - 
       WdiServiceHost - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       WdiSystemHost - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       WebClient - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Wecsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       wercplsupport - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       WerSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k WerSvcGroup - Microsoft Corporation -  - 
       WinDefend - Started - Automatic - C:\Windows\syswow64\svchost.exe -k secsvcs - Microsoft Corporation -  - 
       WinHttpAutoProxySvc - Started - Manual - C:\Windows\syswow64\svchost.exe -k LocalService - Microsoft Corporation -  - 
       Winmgmt - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       WinRM - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k NetworkService - Microsoft Corporation -  - 
       Wlansvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       wmiApSrv - Stopped - Manual - C:\Windows\System32\wbem\WmiApSrv.exe - Microsoft Corporation -  - 
       WMPNetworkSvc - Stopped - Manual - "C:\Program Files\Windows Media Player\wmpnetwk.exe" - Microsoft Corporation -  - 
       WPCSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       WPDBusEnum - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       wscsvc - Started - Automatic - C:\Windows\syswow64\svchost.exe -k LocalServiceNetworkRestricted - Microsoft Corporation -  - 
       WSearch - Started - Automatic - C:\Windows\syswow64\SearchIndexer.exe /Embedding - Microsoft Corporation -  - 
       wuauserv - Started - Automatic - C:\Windows\syswow64\svchost.exe -k netsvcs - Microsoft Corporation -  - 
       wudfsvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalSystemNetworkRestricted - Microsoft Corporation -  - 
       WwanSvc - Stopped - Manual - C:\Windows\syswow64\svchost.exe -k LocalServiceNoNetwork - Microsoft Corporation -  - 

==========================================================================================

Schedule Task

       ASUS Update Checker - \ASUS\ASUS Update Checker - C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe - (null) - Enable - ASUSTeK Computer Inc.
       PolicyConverter - \Microsoft\Windows\AppID\PolicyConverter - C:\Windows\System32\appidpolicyconverter.exe - Pevede zsady zsad omezen softwaru z formtu XML do binrnho formtu. - Disable - Microsoft Corporation
       VerifiedPublisherCertStoreCheck - \Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck - C:\Windows\System32\appidcertstorecheck.exe - Vyhled v mezipamti certifikt AppID neplatn a odvolan certifikty. - Disable - Microsoft Corporation
       AitAgent - \Microsoft\Windows\Application Experience\AitAgent - aitagent - Pihlste-li se do programu Zlepovn softwaru a slueb na zklad zkuenost uivatel, shromauje a odesl informace o telemetrii aplikace. - Enable - 
       ProgramDataUpdater - \Microsoft\Windows\Application Experience\ProgramDataUpdater - C:\Windows\System32\rundll32.exe - Pihlste-li se do programu Zlepovn softwaru a slueb na zklad zkuenost uivatel, shromauje informace o telemetrii programu. - Enable - Microsoft Corporation
       Proxy - \Microsoft\Windows\Autochk\Proxy - C:\Windows\System32\rundll32.exe - Tato loha shromauje a odesl data autochk SQM, pokud se uivatel explicitn pihlsil do programu Zlepovn softwaru a slueb na zklad zkuenost uivatel. - Enable - Microsoft Corporation
       UninstallDeviceTask - \Microsoft\Windows\Bluetooth\UninstallDeviceTask - C:\Windows\system32\BthUdTask.exe - Odinstaluje zazen Plug and Play pidruen k zadanmu ID sluby Bluetooth. - Enable - Microsoft Corporation
       Consolidator - \Microsoft\Windows\Customer Experience Improvement Program\Consolidator - C:\Windows\System32\wsqmcons.exe - Pokud uivatel souhlasil, e se zastn programu Zlepovn softwaru a slueb na zklad zkuenost uivatel, shromauje tato loha data o nvtvnosti webu a odesl je spolenosti Microsoft. - Enable - Microsoft Corporation
       ScheduledDefrag - \Microsoft\Windows\Defrag\ScheduledDefrag - C:\Windows\System32\Defrag.exe - Tato loha provede defragmentaci pevnho disku potae. - Enable - Microsoft Corp.
       Microsoft-Windows-DiskDiagnosticDataCollector - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector - C:\Windows\System32\rundll32.exe - Program Diagnostika disk pedv spolenosti Microsoft zprvy s obecnmi informacemi o discch a systmu uivatel, kte se astn programu Zlepovn softwaru a slueb na zklad zkuenost uivatel. - Disable - Microsoft Corporation
       Microsoft-Windows-DiskDiagnosticResolver - \Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver - C:\Windows\System32\DFDWiz.exe - Vydavatel udlost Microsoft-Windows-DiskDiagnosticResolver upozorn uivatele na chyby hlen pevnmi disky, kter podporuj standard SMART (Self Monitoring and Reporting Technology). Tato loha je po rozpoznn chyby SMART sputna slubou DPS (Diagnostic Policy Service) automaticky. - Disable - Microsoft Corporation
       Notifications - \Microsoft\Windows\Location\Notifications - C:\Windows\System32\LocationNotifications.exe - Aktivity tkajc se pozice - Enable - Microsoft Corporation
       ActivateWindowsSearch - \Microsoft\Windows\Media Center\ActivateWindowsSearch - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha novho vytvoen indexu v hledn aplikace Media Center - Enable - Microsoft Corporation
       ConfigureInternetTimeService - \Microsoft\Windows\Media Center\ConfigureInternetTimeService - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha nastaven sluby asovch aktualizac aplikace Media Center - Enable - Microsoft Corporation
       DispatchRecoveryTasks - \Microsoft\Windows\Media Center\DispatchRecoveryTasks - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha dispeera kol obnoven aplikace Media Center - Enable - Microsoft Corporation
       ehDRMInit - \Microsoft\Windows\Media Center\ehDRMInit - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha inicializace Sprvy digitlnch prv (DRM) aplikace Media Center - Enable - Microsoft Corporation
       InstallPlayReady - \Microsoft\Windows\Media Center\InstallPlayReady - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha instalace technologie PlayReady aplikace Media Center - Enable - Microsoft Corporation
       mcupdate - \Microsoft\Windows\Media Center\mcupdate - C:\Windows\ehome\mcupdate.exe - Vyhled aktualizace aplikace Media Center. - Enable - Microsoft Corporation
       MediaCenterRecoveryTask - \Microsoft\Windows\Media Center\MediaCenterRecoveryTask - C:\Windows\ehome\mcupdate.exe - Provd innosti obnoven aplikace Media Center. - Enable - Microsoft Corporation
       ObjectStoreRecoveryTask - \Microsoft\Windows\Media Center\ObjectStoreRecoveryTask - C:\Windows\ehome\mcupdate.exe - Provd innosti obnoven loit objekt. - Enable - Microsoft Corporation
       OCURActivate - \Microsoft\Windows\Media Center\OCURActivate - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha aktivace pijmae OCUR aplikace Media Center - Enable - Microsoft Corporation
       OCURDiscovery - \Microsoft\Windows\Media Center\OCURDiscovery - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha zjiovn pijmae OCUR aplikace Media Center - Enable - Microsoft Corporation
       PBDADiscovery - \Microsoft\Windows\Media Center\PBDADiscovery - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha zjiovn pijmae OCUR aplikace Media Center - Enable - Microsoft Corporation
       PBDADiscoveryW1 - \Microsoft\Windows\Media Center\PBDADiscoveryW1 - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha zjiovn pijmae OCUR aplikace Media Center - Enable - Microsoft Corporation
       PBDADiscoveryW2 - \Microsoft\Windows\Media Center\PBDADiscoveryW2 - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha zjiovn pijmae OCUR aplikace Media Center - Enable - Microsoft Corporation
       PeriodicScanRetry - \Microsoft\Windows\Media Center\PeriodicScanRetry - C:\Windows\ehome\mcupdate.exe - Periodick vyhledvn na pozad - periodick opakovan vyhledvn - Disable - Microsoft Corporation
       PvrRecoveryTask - \Microsoft\Windows\Media Center\PvrRecoveryTask - C:\Windows\ehome\mcupdate.exe - Provd innosti obnoven PVR. - Enable - Microsoft Corporation
       PvrScheduleTask - \Microsoft\Windows\Media Center\PvrScheduleTask - C:\Windows\ehome\mcupdate.exe - Provd innosti plnovn PVR. - Enable - Microsoft Corporation
       RecordingRestart - \Microsoft\Windows\Media Center\RecordingRestart - C:\Windows\ehome\ehrec.exe - Znovu spust nahrvn po vpadku napjen. - Disable - Microsoft Corporation
       RegisterSearch - \Microsoft\Windows\Media Center\RegisterSearch - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha registrace hledn aplikace Media Center - Enable - Microsoft Corporation
       ReindexSearchRoot - \Microsoft\Windows\Media Center\ReindexSearchRoot - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha novho vytvoen indexu v hledn aplikace Media Center - Enable - Microsoft Corporation
       SqlLiteRecoveryTask - \Microsoft\Windows\Media Center\SqlLiteRecoveryTask - C:\Windows\ehome\mcupdate.exe - Provd innosti obnoven dat. - Enable - Microsoft Corporation
       UpdateRecordPath - \Microsoft\Windows\Media Center\UpdateRecordPath - C:\Windows\ehome\ehPrivJob.exe - Privilegovan loha nastaven oprvnn zznamovho zazen aplikace Media Center - Enable - Microsoft Corporation
       LPRemove - \Microsoft\Windows\MUI\LPRemove - C:\Windows\System32\lpremove.exe - Spustit nstroj pro vyitn jazykovho nastaven - Enable - Microsoft Corporation
       GatherNetworkInfo - \Microsoft\Windows\NetTrace\GatherNetworkInfo - C:\Windows\System32\gatherNetworkInfo.vbs - Shromaovn informac o sti - Enable - 
       AnalyzeSystem - \Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem - C:\Windows\System32\powercfg.exe - Tato loha analyzuje systm a vyhledv okolnosti, kter mohou zpsobovat vysokou spotebu energie. - Enable - Microsoft Corporation
       RemoteAssistanceTask - \Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask - C:\Windows\System32\raserver.exe - Vyhled zsady skupiny tkajc se programu Vzdlen pomoc. - Enable - Microsoft Corporation
       SvcRestartTask - \Microsoft\Windows\SoftwareProtectionPlatform\SvcRestartTask - C:\Windows\system32\sc.exe - Tato loha restartuje v zadan as slubu Software Protection Platform. - Disable - Microsoft Corporation
       SR - \Microsoft\Windows\SystemRestore\SR - C:\Windows\System32\rundll32.exe - Tato loha vytvo bn body ochrany systmu. - Enable - Microsoft Corporation
       IpAddressConflict1 - \Microsoft\Windows\Tcpip\IpAddressConflict1 - C:\Windows\System32\rundll32.exe - Tato udlost je aktivovna, kdy je zjitn konflikt IP adresy. - Enable - Microsoft Corporation
       IpAddressConflict2 - \Microsoft\Windows\Tcpip\IpAddressConflict2 - C:\Windows\System32\rundll32.exe - Tato udlost je aktivovna, kdy je zjitn konflikt IP adresy. - Enable - Microsoft Corporation
       SynchronizeTime - \Microsoft\Windows\Time Synchronization\SynchronizeTime - C:\Windows\System32\sc.exe - Udruje synchronizaci data a asu u vech klient a server v sti. Pokud bude tato sluba ukonena, synchronizace data a asu nebude k dispozici. Jestlie je tato sluba zakzna, nezda se sputn dnch slueb, kter na tto slub zvis. - Enable - Microsoft Corporation
       UPnPHostConfig - \Microsoft\Windows\UPnP\UPnPHostConfig - C:\Windows\system32\sc.exe - Nastavit automatick sputn sluby UPnPHost - Enable - Microsoft Corporation
       ValidationTask - \Microsoft\Windows\Windows Activation Technologies\ValidationTask - C:\Windows\System32\Wat\WatAdminSvc.exe - Microsoft Update KB971033 - Enable - Microsoft Corporation
       ValidationTaskDeadline - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline - C:\Windows\System32\schtasks.exe - Microsoft Update KB971033 - Enable - Microsoft Corporation
       QueueReporting - \Microsoft\Windows\Windows Error Reporting\QueueReporting - C:\Windows\System32\wermgr.exe - loha sluby Zasln zprv o chybch systmu Windows pro zpracovn zprv ve front - Enable - Microsoft Corporation
       BfeOnServiceStartTypeChange - \Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange - C:\Windows\System32\rundll32.exe - Tato loha uprav typ spoutn slueb spoutnch brnou firewall, kdy je typ spoutn sluby BFE (Base Filtering Engine) zakzn. - Enable - Microsoft Corporation
       UpdateLibrary - \Microsoft\Windows\Windows Media Sharing\UpdateLibrary - C:\Program Files\Windows Media Player\wmpnscfg.exe - Tato loha aktualizuje seznam sloek v mezipamti a oprvnn zabezpeen pro vechny nov soubory ve sdlen knihovn mdi uivatele. - Enable - Microsoft Corporation
       ConfigNotification - \Microsoft\Windows\WindowsBackup\ConfigNotification - C:\Windows\System32\sdclt.exe - Tato naplnovan loha upozoruje uivatele, e program Windows Zlohovn nebyl nakonfigurovn. - Enable - Microsoft Corporation
       MP Scheduled Scan - \Microsoft\Windows Defender\MP Scheduled Scan - c:\program files\windows defender\MpCmdRun.exe - Scheduled Scan - Enable - Microsoft Corporation
       SqmUpload_S-1-5-21-1232842137-2361927944-3935939770-1000 - \WPD\SqmUpload_S-1-5-21-1232842137-2361927944-3935939770-1000 - C:\Windows\System32\rundll32.exe - This task uploads Customer Experience Improvement Program (CEIP) data for Portable Devices - Enable - Microsoft Corporation
       Adobe Flash Player Updater - \Adobe Flash Player Updater - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe - Tato loha udruje instalaci pehrvae Adobe Flash Player v aktualizovanm stavu s pouitm nejnovjch rozen a oprav zabezpeen. Pi zakzn nebo odebrn tto lohy nebude moci pehrva Adobe Flash Player pout automatick zabezpeen potae pomoc nejnovjch oprav zabezpeen. - Enable - Adobe Systems Incorporated
       CCleanerSkipUAC - \CCleanerSkipUAC - C:\Program Files\CCleaner\CCleaner.exe - (null) - Enable - Piriform Ltd
       GoogleUpdateTaskMachineCore - \GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe - Udruje software Google aktualizovan. Je-li tato loha zakzna nebo zastavena, nebude v software Google udrovn v aktualizovanm stavu. To znamen, e nemus bt opravena zjitn slab msta v zabezpeen a urit funkce nemus fungovat. Pokud tuto lohu dn software Google nepouv, sama se odinstaluje. - Enable - Google Inc.
       GoogleUpdateTaskMachineUA - \GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe - Udruje software Google aktualizovan. Je-li tato loha zakzna nebo zastavena, nebude v software Google udrovn v aktualizovanm stavu. To znamen, e nemus bt opravena zjitn slab msta v zabezpeen a urit funkce nemus fungovat. Pokud tuto lohu dn software Google nepouv, sama se odinstaluje. - Enable - Google Inc.
       GoogleUpdateTaskUserS-1-5-21-1232842137-2361927944-3935939770-1000Core - \GoogleUpdateTaskUserS-1-5-21-1232842137-2361927944-3935939770-1000Core - C:\Users\JerryMX\AppData\Local\Google\Update\GoogleUpdate.exe - Udruje software Google aktualizovan. Je-li tato loha zakzna nebo zastavena, nebude v software Google udrovn v aktualizovanm stavu. To znamen, e nemus bt opravena zjitn slab msta v zabezpeen a urit funkce nemus fungovat. Pokud tuto lohu dn software Google nepouv, sama se odinstaluje. - Enable - Google Inc.
       GoogleUpdateTaskUserS-1-5-21-1232842137-2361927944-3935939770-1000UA - \GoogleUpdateTaskUserS-1-5-21-1232842137-2361927944-3935939770-1000UA - C:\Users\JerryMX\AppData\Local\Google\Update\GoogleUpdate.exe - Udruje software Google aktualizovan. Je-li tato loha zakzna nebo zastavena, nebude v software Google udrovn v aktualizovanm stavu. To znamen, e nemus bt opravena zjitn slab msta v zabezpeen a urit funkce nemus fungovat. Pokud tuto lohu dn software Google nepouv, sama se odinstaluje. - Enable - Google Inc.

==========================================================================================

File Association

       .bat - "%1" %* - HKEY_CLASSES_ROOT\.bat
       .cmd - "%1" %* - HKEY_CLASSES_ROOT\.cmd
       .com - "%1" %* - HKEY_CLASSES_ROOT\.com
       .exe - "%1" %* - HKEY_CLASSES_ROOT\.exe
       .scr - "%1" /S - HKEY_CLASSES_ROOT\.scr
       .txt - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\.txt
       .ini - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\.ini
       .pif - "%1" %* - HKEY_CLASSES_ROOT\.pif
       .reg - regedit.exe "%1" - HKEY_CLASSES_ROOT\.reg
       .inf - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\.inf
       .hlp - %SystemRoot%\winhlp32.exe %1 - HKEY_CLASSES_ROOT\.hlp
       .chm - "%SystemRoot%\hh.exe" %1 - HKEY_CLASSES_ROOT\.chm
       .vbs - "%SystemRoot%\System32\WScript.exe" "%1" %* - HKEY_CLASSES_ROOT\.vbs
       .js - C:\Windows\System32\WScript.exe "%1" %* - HKEY_CLASSES_ROOT\.js
       .lnk - lnkfile - HKEY_CLASSES_ROOT\.lnk
       batfile - "%1" %* - HKEY_CLASSES_ROOT\batfile\Shell\Open\Command
       cmdfile - "%1" %* - HKEY_CLASSES_ROOT\cmdfile\Shell\Open\Command
       comfile - "%1" %* - HKEY_CLASSES_ROOT\comfile\Shell\Open\Command
       exefile - "%1" %* - HKEY_CLASSES_ROOT\exefile\Shell\Open\Command
       scrfile - "%1" /S - HKEY_CLASSES_ROOT\scrfile\Shell\Open\Command
       txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\txtfile\Shell\Open\Command
       inifile - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\inifile\Shell\Open\Command
       piffile - "%1" %* - HKEY_CLASSES_ROOT\piffile\Shell\Open\Command
       regfile - regedit.exe "%1" - HKEY_CLASSES_ROOT\regfile\Shell\Open\Command
       inffile - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CLASSES_ROOT\inffile\Shell\Open\Command
       hlpfile - %SystemRoot%\winhlp32.exe %1 - HKEY_CLASSES_ROOT\hlpfile\Shell\Open\Command
       chm.file - "%SystemRoot%\hh.exe" %1 - HKEY_CLASSES_ROOT\chm.file\Shell\Open\Command
       vbsfile - "%SystemRoot%\System32\WScript.exe" "%1" %* - HKEY_CLASSES_ROOT\vbsfile\Shell\Open\Command
       jsfile - C:\Windows\System32\WScript.exe "%1" %* - HKEY_CLASSES_ROOT\jsfile\Shell\Open\Command
       HKCU .exe Progid - "%1" %* - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.exe\OpenWithProgids
       HKCU .txt Progid - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.txt\OpenWithProgids
       HKCU .ini Progid - %SystemRoot%\system32\NOTEPAD.EXE %1 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ini\OpenWithProgids
       HKCU .hlp Progid - %SystemRoot%\winhlp32.exe %1 - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hlp\OpenWithProgids
       HKCU .lnk Progid -  - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithProgids

==========================================================================================

IFEO

       Nothing

==========================================================================================

IME

       Czech -  -  - C:\Windows\system32\KBDCZ.DLL - Microsoft Corporation
       US -  -  - C:\Windows\system32\KBDUS.DLL - Microsoft Corporation

==========================================================================================

Firewall Rule

       SSTP-IN-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=443|App=System|Name=@sstpsvc.dll,-35002|Desc=@sstpsvc.dll,-35003|EmbedCtxt=@sstpsvc.dll,-35001| - Enabled - 
       Netlogon-NamedPipe-In --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=445|App=System|Name=@netlogon.dll,-1003|Desc=@netlogon.dll,-1006|EmbedCtxt=@netlogon.dll,-1010| - Enabled - 
       SNMPTRAP-In-UDP --> C:\Windows\System32\snmptrap.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=162|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\snmptrap.exe|Svc=SNMPTRAP|Name=@snmptrap.exe,-7|Desc=@snmptrap.exe,-8|EmbedCtxt=@snmptrap.exe,-3| - Enabled - Microsoft Corporation
       SNMPTRAP-In-UDP-NoScope --> C:\Windows\System32\snmptrap.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=162|App=%SystemRoot%\system32\snmptrap.exe|Svc=SNMPTRAP|Name=@snmptrap.exe,-7|Desc=@snmptrap.exe,-8|EmbedCtxt=@snmptrap.exe,-3| - Enabled - Microsoft Corporation
       WMP-In-UDP-x86 --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31023|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-UDP-x86 --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31024|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-TCP-x86 --> C:\Program Files (x86)\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%ProgramFiles(x86)%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31025|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-In-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31003|Desc=@FirewallAPI.dll,-31006|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31007|Desc=@FirewallAPI.dll,-31010|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMP-Out-TCP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%ProgramFiles%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31011|Desc=@FirewallAPI.dll,-31014|EmbedCtxt=@FirewallAPI.dll,-31002| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-UDP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31253|Desc=@FirewallAPI.dll,-31256|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-UDP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31261|Desc=@FirewallAPI.dll,-31264|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=2177|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31265|Desc=@FirewallAPI.dll,-31268|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-HTTPSTR-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=10243|App=System|Name=@FirewallAPI.dll,-31285|Desc=@FirewallAPI.dll,-31288|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-HTTPSTR-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=10243|App=System|Name=@FirewallAPI.dll,-31289|Desc=@FirewallAPI.dll,-31292|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-WMP-In-UDP-NoScope --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-UDP-NoScope --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-TCP-NoScope --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-UDP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31305|Desc=@FirewallAPI.dll,-31308|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-UDP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31309|Desc=@FirewallAPI.dll,-31312|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-TCP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31313|Desc=@FirewallAPI.dll,-31316|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-TCP-NoScope --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31317|Desc=@FirewallAPI.dll,-31320|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31253|Desc=@FirewallAPI.dll,-31256|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31257|Desc=@FirewallAPI.dll,-31260|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31261|Desc=@FirewallAPI.dll,-31264|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-QWave-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-31265|Desc=@FirewallAPI.dll,-31268|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-31269|Desc=@FirewallAPI.dll,-31272|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ssdpsrv|Name=@FirewallAPI.dll,-31273|Desc=@FirewallAPI.dll,-31276|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-UPnPHost-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31277|Desc=@FirewallAPI.dll,-31280|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-UPnPHost-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31281|Desc=@FirewallAPI.dll,-31284|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-HTTPSTR-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31285|Desc=@FirewallAPI.dll,-31288|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-HTTPSTR-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=10243|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31289|Desc=@FirewallAPI.dll,-31292|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - 
       WMPNSS-WMP-In-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31293|Desc=@FirewallAPI.dll,-31296|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-UDP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31297|Desc=@FirewallAPI.dll,-31300|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-WMP-Out-TCP --> C:\Program Files\Windows Media Player\wmplayer.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmplayer.exe|Name=@FirewallAPI.dll,-31301|Desc=@FirewallAPI.dll,-31304|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-UDP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31305|Desc=@FirewallAPI.dll,-31308|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-UDP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31309|Desc=@FirewallAPI.dll,-31312|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-In-TCP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31313|Desc=@FirewallAPI.dll,-31316|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-Out-TCP --> C:\Program Files\Windows Media Player\wmpnetwk.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe|Name=@FirewallAPI.dll,-31317|Desc=@FirewallAPI.dll,-31320|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-UPnP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-31321|Desc=@FirewallAPI.dll,-31322|EmbedCtxt=@FirewallAPI.dll,-31252| - Enabled - Microsoft Corporation
       WMPNSS-RME-HTTP-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=10245|App=System|Name=@FirewallAPI.dll,-31501|Desc=@FirewallAPI.dll,-31502|EmbedCtxt=@FirewallAPI.dll,-31500|Edge=TRUE|Defer=App| - Enabled - 
       Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-In --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|LPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=p2psvc|Name=@%systemroot%\system32\provsvc.dll,-200|Desc=@%systemroot%\system32\provsvc.dll,-201|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       Microsoft-Windows-HomeGroup-ProvSvc-TCP3587-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|RPort=3587|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=p2psvc|Name=@%systemroot%\system32\provsvc.dll,-203|Desc=@%systemroot%\system32\provsvc.dll,-204|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-In --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|LPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\system32\provsvc.dll,-205|Desc=@%systemroot%\system32\provsvc.dll,-206|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       Microsoft-Windows-HomeGroup-ProvSvc-UDP3540-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|RPort=3540|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@%systemroot%\system32\provsvc.dll,-207|Desc=@%systemroot%\system32\provsvc.dll,-208|EmbedCtxt=@%systemroot%\system32\provsvc.dll,-202| - Enabled - Microsoft Corporation
       PNRPMNRS-PNRP-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-34003|Desc=@FirewallAPI.dll,-34004|EmbedCtxt=@FirewallAPI.dll,-34002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       PNRPMNRS-PNRP-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-34005|Desc=@FirewallAPI.dll,-34006|EmbedCtxt=@FirewallAPI.dll,-34002| - Enabled - Microsoft Corporation
       PNRPMNRS-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-34007|Desc=@FirewallAPI.dll,-34008|EmbedCtxt=@FirewallAPI.dll,-34002| - Enabled - Microsoft Corporation
       PNRPMNRS-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-34009|Desc=@FirewallAPI.dll,-34010|EmbedCtxt=@FirewallAPI.dll,-34002| - Enabled - Microsoft Corporation
       RVM-VDS-In-TCP-NoScope --> C:\Windows\System32\vds.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\vds.exe|Svc=vds|Name=@FirewallAPI.dll,-34502|Desc=@FirewallAPI.dll,-34503|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-VDSLDR-In-TCP-NoScope --> C:\Windows\System32\vdsldr.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\vdsldr.exe|Name=@FirewallAPI.dll,-34504|Desc=@FirewallAPI.dll,-34505|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-34506|Desc=@FirewallAPI.dll,-34507|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-VDS-In-TCP --> C:\Windows\System32\vds.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\vds.exe|Svc=vds|Name=@FirewallAPI.dll,-34502|Desc=@FirewallAPI.dll,-34503|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-VDSLDR-In-TCP --> C:\Windows\System32\vdsldr.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\vdsldr.exe|Name=@FirewallAPI.dll,-34504|Desc=@FirewallAPI.dll,-34505|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       RVM-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-34506|Desc=@FirewallAPI.dll,-34507|EmbedCtxt=@FirewallAPI.dll,-34501| - Enabled - Microsoft Corporation
       Collab-P2PHost-In-TCP --> C:\Windows\System32\p2phost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32003|Desc=@FirewallAPI.dll,-32006|EmbedCtxt=@FirewallAPI.dll,-32002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       Collab-P2PHost-Out-TCP --> C:\Windows\System32\p2phost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32007|Desc=@FirewallAPI.dll,-32010|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-P2PHost-WSD-In-UDP --> C:\Windows\System32\p2phost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32011|Desc=@FirewallAPI.dll,-32014|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-P2PHost-WSD-Out-UDP --> C:\Windows\System32\p2phost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\p2phost.exe|Name=@FirewallAPI.dll,-32015|Desc=@FirewallAPI.dll,-32018|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-PNRP-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-32019|Desc=@FirewallAPI.dll,-32022|EmbedCtxt=@FirewallAPI.dll,-32002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       Collab-PNRP-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3540|App=%SystemRoot%\system32\svchost.exe|Svc=PNRPSvc|Name=@FirewallAPI.dll,-32023|Desc=@FirewallAPI.dll,-32026|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-PNRP-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32027|Desc=@FirewallAPI.dll,-32030|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       Collab-PNRP-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32031|Desc=@FirewallAPI.dll,-32034|EmbedCtxt=@FirewallAPI.dll,-32002| - Enabled - Microsoft Corporation
       FPS-NB_Session-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=139|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=139|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-In-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-Out-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-In-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-Out-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SpoolSvc-In-TCP-NoScope --> C:\Windows\System32\spoolsv.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-RPCSS-In-TCP-NoScope - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-In-NoScope - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-Out-NoScope - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Domain|ICMP4=8:*|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-In-NoScope - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-Out-NoScope - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Domain|ICMP6=128:*|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28503|Desc=@FirewallAPI.dll,-28506|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Session-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=139|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28507|Desc=@FirewallAPI.dll,-28510|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28511|Desc=@FirewallAPI.dll,-28514|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SMB-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28515|Desc=@FirewallAPI.dll,-28518|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-In-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28519|Desc=@FirewallAPI.dll,-28522|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Name-Out-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28523|Desc=@FirewallAPI.dll,-28526|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-In-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Private|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28527|Desc=@FirewallAPI.dll,-28530|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-NB_Datagram-Out-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Private|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-28531|Desc=@FirewallAPI.dll,-28534|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-SpoolSvc-In-TCP --> C:\Windows\System32\spoolsv.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\spoolsv.exe|Svc=Spooler|Name=@FirewallAPI.dll,-28535|Desc=@FirewallAPI.dll,-28538|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-RPCSS-In-TCP - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|Svc=Rpcss|Name=@FirewallAPI.dll,-28539|Desc=@FirewallAPI.dll,-28542|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-In - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=1|Profile=Private|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|Name=@FirewallAPI.dll,-28543|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP4-ERQ-Out - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=1|Profile=Private|Profile=Public|ICMP4=8:*|RA4=LocalSubnet|Name=@FirewallAPI.dll,-28544|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-In - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=58|Profile=Private|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-28545|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-ICMP6-ERQ-Out - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=58|Profile=Private|Profile=Public|ICMP6=128:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-28546|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - 
       FPS-LLMNR-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28548|Desc=@FirewallAPI.dll,-28549|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       FPS-LLMNR-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-28550|Desc=@FirewallAPI.dll,-28551|EmbedCtxt=@FirewallAPI.dll,-28502| - Enabled - Microsoft Corporation
       CoreNet-ICMP6-DU-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=1:*|App=System|Name=@FirewallAPI.dll,-25110|Desc=@FirewallAPI.dll,-25112|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-PTB-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=2:*|App=System|Name=@FirewallAPI.dll,-25001|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-PTB-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=2:*|Name=@FirewallAPI.dll,-25002|Desc=@FirewallAPI.dll,-25007|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-TE-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=3:*|App=System|Name=@FirewallAPI.dll,-25113|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-TE-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=3:*|Name=@FirewallAPI.dll,-25114|Desc=@FirewallAPI.dll,-25115|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-PP-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=4:*|App=System|Name=@FirewallAPI.dll,-25116|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-PP-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=4:*|Name=@FirewallAPI.dll,-25117|Desc=@FirewallAPI.dll,-25118|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-NDS-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=135:*|App=System|Name=@FirewallAPI.dll,-25019|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-NDS-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=135:*|Name=@FirewallAPI.dll,-25020|Desc=@FirewallAPI.dll,-25025|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-NDA-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=136:*|App=System|Name=@FirewallAPI.dll,-25026|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000|Edge=TRUE| - Enabled - 
       CoreNet-ICMP6-NDA-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=136:*|Name=@FirewallAPI.dll,-25027|Desc=@FirewallAPI.dll,-25032|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RA-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=134:*|RA6=fe80::/64|App=System|Name=@FirewallAPI.dll,-25012|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RA-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=134:*|LA6=fe80::/64|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::1|Name=@FirewallAPI.dll,-25013|Desc=@FirewallAPI.dll,-25018|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RS-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=133:*|App=System|Name=@FirewallAPI.dll,-25009|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-RS-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=133:*|RA6=LocalSubnet|RA6=fe80::/64|RA6=ff02::2|Name=@FirewallAPI.dll,-25008|Desc=@FirewallAPI.dll,-25011|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LQ-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25061|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LQ-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=130:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25062|Desc=@FirewallAPI.dll,-25067|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25068|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=131:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25069|Desc=@FirewallAPI.dll,-25074|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR2-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25075|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LR2-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=143:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25076|Desc=@FirewallAPI.dll,-25081|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LD-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-25082|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP6-LD-Out - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=132:*|RA6=LocalSubnet|Name=@FirewallAPI.dll,-25083|Desc=@FirewallAPI.dll,-25088|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-ICMP4-DUFRAG-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=1|ICMP4=3:4|App=System|Name=@FirewallAPI.dll,-25251|Desc=@FirewallAPI.dll,-25257|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IGMP-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=2|App=System|Name=@FirewallAPI.dll,-25376|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IGMP-Out --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=2|App=System|Name=@FirewallAPI.dll,-25377|Desc=@FirewallAPI.dll,-25382|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-DHCP-In --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25301|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DHCP-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=68|RPort=67|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25302|Desc=@FirewallAPI.dll,-25303|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DHCPV6-In --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25304|Desc=@FirewallAPI.dll,-25306|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DHCPV6-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|LPort=546|RPort=547|App=%SystemRoot%\system32\svchost.exe|Svc=dhcp|Name=@FirewallAPI.dll,-25305|Desc=@FirewallAPI.dll,-25306|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-Teredo-In --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|LPort=Teredo|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25326|Desc=@FirewallAPI.dll,-25332|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-Teredo-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25327|Desc=@FirewallAPI.dll,-25333|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-IPHTTPS-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|LPort2_10=IPTLSIn|LPort2_10=IPHTTPSIn|App=System|Name=@FirewallAPI.dll,-25426|Desc=@FirewallAPI.dll,-25428|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IPHTTPS-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|RPort2_10=IPTLSOut|RPort2_10=IPHTTPSOut|App=%SystemRoot%\system32\svchost.exe|Svc=iphlpsvc|Name=@FirewallAPI.dll,-25427|Desc=@FirewallAPI.dll,-25429|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-IPv6-In --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=41|App=System|Name=@FirewallAPI.dll,-25351|Desc=@FirewallAPI.dll,-25357|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-IPv6-Out --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=41|App=System|Name=@FirewallAPI.dll,-25352|Desc=@FirewallAPI.dll,-25358|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-GP-NP-Out-TCP --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|RPort=445|App=System|Name=@FirewallAPI.dll,-25401|Desc=@FirewallAPI.dll,-25401|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       CoreNet-GP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Name=@FirewallAPI.dll,-25403|Desc=@FirewallAPI.dll,-25404|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-DNS-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|RPort=53|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-25405|Desc=@FirewallAPI.dll,-25406|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       CoreNet-GP-LSASS-Out-TCP --> C:\Windows\System32\lsass.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\lsass.exe|Name=@FirewallAPI.dll,-25407|Desc=@FirewallAPI.dll,-25408|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - Microsoft Corporation
       PerfLogsAlerts-PLASrv-In-TCP --> C:\Windows\System32\plasrv.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\plasrv.exe|Name=@FirewallAPI.dll,-34753|Desc=@FirewallAPI.dll,-34754|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       PerfLogsAlerts-DCOM-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34755|Desc=@FirewallAPI.dll,-34756|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       PerfLogsAlerts-PLASrv-In-TCP-NoScope --> C:\Windows\System32\plasrv.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\plasrv.exe|Name=@FirewallAPI.dll,-34753|Desc=@FirewallAPI.dll,-34754|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       PerfLogsAlerts-DCOM-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%systemroot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34755|Desc=@FirewallAPI.dll,-34756|EmbedCtxt=@FirewallAPI.dll,-34752| - Enabled - Microsoft Corporation
       MsiScsi-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29003|Desc=@FirewallAPI.dll,-29006|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       MsiScsi-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       MsiScsi-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29003|Desc=@FirewallAPI.dll,-29006|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       MsiScsi-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Msiscsi|Name=@FirewallAPI.dll,-29007|Desc=@FirewallAPI.dll,-29010|EmbedCtxt=@FirewallAPI.dll,-29002| - Enabled - Microsoft Corporation
       WMI-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-Out-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34258|Desc=@FirewallAPI.dll,-34259|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-ASYNC-In-TCP-NoScope --> C:\Windows\System32\wbem\unsecapp.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=135|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-34252|Desc=@FirewallAPI.dll,-34253|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34254|Desc=@FirewallAPI.dll,-34255|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-WINMGMT-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=winmgmt|Name=@FirewallAPI.dll,-34258|Desc=@FirewallAPI.dll,-34259|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       WMI-ASYNC-In-TCP --> C:\Windows\System32\wbem\unsecapp.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\wbem\unsecapp.exe|Name=@FirewallAPI.dll,-34256|Desc=@FirewallAPI.dll,-34257|EmbedCtxt=@FirewallAPI.dll,-34251| - Enabled - Microsoft Corporation
       RRAS-GRE-In --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=47|App=System|Name=@FirewallAPI.dll,-33769|Desc=@FirewallAPI.dll,-33772|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-GRE-Out --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=47|App=System|Name=@FirewallAPI.dll,-33773|Desc=@FirewallAPI.dll,-33776|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-L2TP-In-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1701|App=System|Name=@FirewallAPI.dll,-33753|Desc=@FirewallAPI.dll,-33756|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-L2TP-Out-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1701|App=System|Name=@FirewallAPI.dll,-33757|Desc=@FirewallAPI.dll,-33760|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-PPTP-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=1723|App=System|Name=@FirewallAPI.dll,-33765|Desc=@FirewallAPI.dll,-33768|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       RRAS-PPTP-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=1723|App=System|Name=@FirewallAPI.dll,-33761|Desc=@FirewallAPI.dll,-33764|EmbedCtxt=@FirewallAPI.dll,-33752| - Enabled - 
       NETDIS-UPnPHost-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=2869|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnPHost-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=System|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-In-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=137|App=System|Name=@FirewallAPI.dll,-32769|Desc=@FirewallAPI.dll,-32772|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-Out-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=137|App=System|Name=@FirewallAPI.dll,-32773|Desc=@FirewallAPI.dll,-32776|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-In-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|LPort=138|App=System|Name=@FirewallAPI.dll,-32777|Desc=@FirewallAPI.dll,-32780|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-Out-UDP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|RPort=138|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-SSDPSrv-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnPHost-In-TCP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnPHost-Out-TCP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnP-Out-TCP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-32821|Desc=@FirewallAPI.dll,-32822|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-NB_Name-In-UDP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32769|Desc=@FirewallAPI.dll,-32772|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-Out-UDP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32773|Desc=@FirewallAPI.dll,-32776|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-In-UDP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32777|Desc=@FirewallAPI.dll,-32780|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-Out-UDP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-FDPHOST-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32785|Desc=@FirewallAPI.dll,-32788|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDPHOST-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32789|Desc=@FirewallAPI.dll,-32792|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32801|Desc=@FirewallAPI.dll,-32804|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32805|Desc=@FirewallAPI.dll,-32808|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32809|Desc=@FirewallAPI.dll,-32810|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Private|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32811|Desc=@FirewallAPI.dll,-32812|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNTS-In-TCP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-Out-TCP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-In-TCP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-Out-TCP-Active --> System - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Private|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32753|Desc=@FirewallAPI.dll,-32756|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-32757|Desc=@FirewallAPI.dll,-32760|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-32821|Desc=@FirewallAPI.dll,-32822|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-UPnPHost-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32761|Desc=@FirewallAPI.dll,-32764|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-UPnPHost-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32765|Desc=@FirewallAPI.dll,-32768|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-In-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32769|Desc=@FirewallAPI.dll,-32772|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Name-Out-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RPort=137|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32773|Desc=@FirewallAPI.dll,-32776|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-In-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32777|Desc=@FirewallAPI.dll,-32780|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-NB_Datagram-Out-UDP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|RPort=138|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32781|Desc=@FirewallAPI.dll,-32784|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-FDPHOST-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32785|Desc=@FirewallAPI.dll,-32788|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDPHOST-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-32789|Desc=@FirewallAPI.dll,-32792|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32801|Desc=@FirewallAPI.dll,-32804|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-LLMNR-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=5355|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=dnscache|Name=@FirewallAPI.dll,-32805|Desc=@FirewallAPI.dll,-32808|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|Profile=Public|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32809|Desc=@FirewallAPI.dll,-32810|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-FDRESPUB-WSD-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Domain|Profile=Public|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdrespub|Name=@FirewallAPI.dll,-32811|Desc=@FirewallAPI.dll,-32812|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - Microsoft Corporation
       NETDIS-WSDEVNTS-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32813|Desc=@FirewallAPI.dll,-32814|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNTS-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32815|Desc=@FirewallAPI.dll,-32816|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32817|Desc=@FirewallAPI.dll,-32818|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       NETDIS-WSDEVNT-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-32819|Desc=@FirewallAPI.dll,-32820|EmbedCtxt=@FirewallAPI.dll,-32752| - Enabled - 
       RemoteSvcAdmin-In-TCP-NoScope --> C:\Windows\System32\services.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\services.exe|Name=@FirewallAPI.dll,-29503|Desc=@FirewallAPI.dll,-29506|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-NP-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-29507|Desc=@FirewallAPI.dll,-29510|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - 
       RemoteSvcAdmin-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29515|Desc=@FirewallAPI.dll,-29518|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-In-TCP --> C:\Windows\System32\services.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\services.exe|Name=@FirewallAPI.dll,-29503|Desc=@FirewallAPI.dll,-29506|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteSvcAdmin-NP-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-29507|Desc=@FirewallAPI.dll,-29510|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - 
       RemoteSvcAdmin-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29515|Desc=@FirewallAPI.dll,-29518|EmbedCtxt=@FirewallAPI.dll,-29502| - Enabled - Microsoft Corporation
       RemoteTask-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=schedule|Name=@FirewallAPI.dll,-33253|Desc=@FirewallAPI.dll,-33256|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RemoteTask-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33257|Desc=@FirewallAPI.dll,-33260|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RemoteTask-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=schedule|Name=@FirewallAPI.dll,-33253|Desc=@FirewallAPI.dll,-33256|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       RemoteTask-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33257|Desc=@FirewallAPI.dll,-33260|EmbedCtxt=@FirewallAPI.dll,-33252| - Enabled - Microsoft Corporation
       MSDTC-In-TCP-NoScope --> C:\Windows\System32\msdtc.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33503|Desc=@FirewallAPI.dll,-33506|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-Out-TCP-NoScope --> C:\Windows\System32\msdtc.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33507|Desc=@FirewallAPI.dll,-33510|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-KTMRM-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=ktmrm|Name=@FirewallAPI.dll,-33511|Desc=@FirewallAPI.dll,-33512|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33513|Desc=@FirewallAPI.dll,-33514|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-In-TCP --> C:\Windows\System32\msdtc.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33503|Desc=@FirewallAPI.dll,-33506|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-Out-TCP --> C:\Windows\System32\msdtc.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\msdtc.exe|Name=@FirewallAPI.dll,-33507|Desc=@FirewallAPI.dll,-33510|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-KTMRM-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=ktmrm|Name=@FirewallAPI.dll,-33511|Desc=@FirewallAPI.dll,-33512|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       MSDTC-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-33513|Desc=@FirewallAPI.dll,-33514|EmbedCtxt=@FirewallAPI.dll,-33502| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=Eventlog|Name=@FirewallAPI.dll,-29253|Desc=@FirewallAPI.dll,-29256|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-NP-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=445|App=System|Name=@FirewallAPI.dll,-29257|Desc=@FirewallAPI.dll,-29260|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - 
       RemoteEventLogSvc-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Eventlog|Name=@FirewallAPI.dll,-29253|Desc=@FirewallAPI.dll,-29256|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       RemoteEventLogSvc-NP-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=445|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-29257|Desc=@FirewallAPI.dll,-29260|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - 
       RemoteEventLogSvc-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-29265|Desc=@FirewallAPI.dll,-29268|EmbedCtxt=@FirewallAPI.dll,-29252| - Enabled - Microsoft Corporation
       WINRM-HTTP-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5985|App=System|Name=@FirewallAPI.dll,-30253|Desc=@FirewallAPI.dll,-30256|EmbedCtxt=@FirewallAPI.dll,-30252| - Enabled - 
       WINRM-HTTP-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5985|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30253|Desc=@FirewallAPI.dll,-30256|EmbedCtxt=@FirewallAPI.dll,-30252| - Enabled - 
       WINRM-HTTP-Compat-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=80|App=System|Name=@FirewallAPI.dll,-35001|Desc=@FirewallAPI.dll,-35002|EmbedCtxt=@FirewallAPI.dll,-30252| - Enabled - 
       WINRM-HTTP-Compat-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=80|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-35001|Desc=@FirewallAPI.dll,-35002|EmbedCtxt=@FirewallAPI.dll,-30252| - Enabled - 
       RemoteFwAdmin-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC|App=%SystemRoot%\system32\svchost.exe|Svc=policyagent|Name=@FirewallAPI.dll,-30003|Desc=@FirewallAPI.dll,-30006|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteFwAdmin-RPCSS-In-TCP-NoScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=RPC-EPMap|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-30007|Desc=@FirewallAPI.dll,-30010|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteFwAdmin-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=policyagent|Name=@FirewallAPI.dll,-30003|Desc=@FirewallAPI.dll,-30006|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteFwAdmin-RPCSS-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=RPC-EPMap|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=RPCSS|Name=@FirewallAPI.dll,-30007|Desc=@FirewallAPI.dll,-30010|EmbedCtxt=@FirewallAPI.dll,-30002| - Enabled - Microsoft Corporation
       RemoteAssistance-In-TCP-EdgeScope --> C:\Windows\System32\msra.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33003|Desc=@FirewallAPI.dll,-33006|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-Out-TCP --> C:\Windows\System32\msra.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Public|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-In-EdgeScope --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|LPort=3540|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33039|Desc=@FirewallAPI.dll,-33040|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-OUT --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|Profile=Public|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-RAServer-In-TCP-NoScope-Active --> C:\Windows\System32\raserver.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33011|Desc=@FirewallAPI.dll,-33014|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-RAServer-Out-TCP-NoScope-Active --> C:\Windows\System32\raserver.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\raserver.exe|Name=@FirewallAPI.dll,-33015|Desc=@FirewallAPI.dll,-33018|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-DCOM-In-TCP-NoScope-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|LPort=135|App=%SystemRoot%\system32\svchost.exe|Svc=rpcss|Name=@FirewallAPI.dll,-33035|Desc=@FirewallAPI.dll,-33036|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-In-TCP-EdgeScope-Active --> C:\Windows\System32\msra.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33003|Desc=@FirewallAPI.dll,-33006|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-Out-TCP-Active --> C:\Windows\System32\msra.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|App=%SystemRoot%\system32\msra.exe|Name=@FirewallAPI.dll,-33007|Desc=@FirewallAPI.dll,-33010|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-In-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33019|Desc=@FirewallAPI.dll,-33022|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-Out-UDP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33023|Desc=@FirewallAPI.dll,-33026|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-In-TCP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Domain|Profile=Private|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33027|Desc=@FirewallAPI.dll,-33030|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-SSDPSrv-Out-TCP-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=6|Profile=Domain|Profile=Private|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-33031|Desc=@FirewallAPI.dll,-33034|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-In-EdgeScope-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Domain|Profile=Private|LPort=3540|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33039|Desc=@FirewallAPI.dll,-33040|EmbedCtxt=@FirewallAPI.dll,-33002|Edge=TRUE|Defer=App| - Enabled - Microsoft Corporation
       RemoteAssistance-PnrpSvc-UDP-OUT-Active --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=17|Profile=Domain|Profile=Private|App=%systemroot%\system32\svchost.exe|Svc=pnrpsvc|Name=@FirewallAPI.dll,-33037|Desc=@FirewallAPI.dll,-33038|EmbedCtxt=@FirewallAPI.dll,-33002| - Enabled - Microsoft Corporation
       MCX-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30753|Desc=@FirewallAPI.dll,-30756|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30757|Desc=@FirewallAPI.dll,-30760|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-In-TCP --> C:\Windows\ehome\ehshell.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=554|LPort=8554|LPort=8555|LPort=8556|LPort=8557|LPort=8558|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30761|Desc=@FirewallAPI.dll,-30764|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-Out-TCP --> C:\Windows\ehome\ehshell.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30765|Desc=@FirewallAPI.dll,-30768|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30769|Desc=@FirewallAPI.dll,-30772|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30773|Desc=@FirewallAPI.dll,-30776|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30777|Desc=@FirewallAPI.dll,-30780|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-QWave-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=2177|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Qwave|Name=@FirewallAPI.dll,-30781|Desc=@FirewallAPI.dll,-30784|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-HTTPSTR-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=10244|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30785|Desc=@FirewallAPI.dll,-30788|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - 
       MCX-TERMSRV-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=3390|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30793|Desc=@FirewallAPI.dll,-30796|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - 
       MCX-In-UDP --> C:\Windows\ehome\ehshell.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=7777|LPort=7778|LPort=7779|LPort=7780|LPort=7781|LPort=5004|LPort=5005|LPort=50004|LPort=50005|LPort=50006|LPort=50007|LPort=50008|LPort=50009|LPort=50010|LPort=50011|LPort=50012|LPort=50013|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30801|Desc=@FirewallAPI.dll,-30804|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-Out-UDP --> C:\Windows\ehome\ehshell.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\ehome\ehshell.exe|Name=@FirewallAPI.dll,-30805|Desc=@FirewallAPI.dll,-30808|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-MCX2SVC-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=mcx2svc|Name=@FirewallAPI.dll,-30810|Desc=@FirewallAPI.dll,-30811|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-Prov-Out-TCP --> C:\Windows\ehome\Mcx2Prov.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\ehome\mcx2prov.exe|Name=@FirewallAPI.dll,-30812|Desc=@FirewallAPI.dll,-30813|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-PlayTo-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30814|Desc=@FirewallAPI.dll,-30815|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - 
       MCX-PlayTo-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-30816|Desc=@FirewallAPI.dll,-30817|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-McrMgr-Out-TCP --> C:\Windows\ehome\McrMgr.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|App=%SystemRoot%\ehome\mcrmgr.exe|Name=@FirewallAPI.dll,-30818|Desc=@FirewallAPI.dll,-30819|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-PlayTo-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30820|Desc=@FirewallAPI.dll,-30821|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       MCX-FDPHost-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-30822|Desc=@FirewallAPI.dll,-30823|EmbedCtxt=@FirewallAPI.dll,-30752| - Enabled - Microsoft Corporation
       Microsoft-Windows-PeerDist-HttpTrans-In --> SYSTEM - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=80|App=SYSTEM|Name=@peerdistsh.dll,-10000|Desc=@peerdistsh.dll,-11000|EmbedCtxt=@peerdistsh.dll,-9000| - Enabled - 
       Microsoft-Windows-PeerDist-HttpTrans-Out --> SYSTEM - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=80|App=SYSTEM|Name=@peerdistsh.dll,-10001|Desc=@peerdistsh.dll,-11001|EmbedCtxt=@peerdistsh.dll,-9000| - Enabled - 
       Microsoft-Windows-PeerDist-WSD-In --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=PeerDistSvc|Name=@peerdistsh.dll,-10002|Desc=@peerdistsh.dll,-11002|EmbedCtxt=@peerdistsh.dll,-9001| - Enabled - Microsoft Corporation
       Microsoft-Windows-PeerDist-WSD-Out --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%systemroot%\system32\svchost.exe|Svc=PeerDistSvc|Name=@peerdistsh.dll,-10003|Desc=@peerdistsh.dll,-11003|EmbedCtxt=@peerdistsh.dll,-9001| - Enabled - Microsoft Corporation
       Microsoft-Windows-PeerDist-HostedServer-In --> SYSTEM - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=443|App=SYSTEM|Name=@peerdistsh.dll,-10004|Desc=@peerdistsh.dll,-11004|EmbedCtxt=@peerdistsh.dll,-9002| - Enabled - 
       Microsoft-Windows-PeerDist-HostedServer-Out --> SYSTEM - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|LPort=443|App=SYSTEM|Name=@peerdistsh.dll,-10005|Desc=@peerdistsh.dll,-11005|EmbedCtxt=@peerdistsh.dll,-9002| - Enabled - 
       Microsoft-Windows-PeerDist-HostedClient-Out --> SYSTEM - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RPort=443|App=SYSTEM|Name=@peerdistsh.dll,-10006|Desc=@peerdistsh.dll,-11006|EmbedCtxt=@peerdistsh.dll,-9003| - Enabled - 
       WPDMTP-Out-TCP-NoScope --> C:\Windows\System32\WUDFHost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\wudfhost.exe|Name=@FirewallAPI.dll,-30503|Desc=@FirewallAPI.dll,-30506|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-Out-TCP --> C:\Windows\System32\WUDFHost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\wudfhost.exe|Name=@FirewallAPI.dll,-30503|Desc=@FirewallAPI.dll,-30506|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-SSDPSrv-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30507|Desc=@FirewallAPI.dll,-30510|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-SSDPSrv-Out-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=1900|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=Ssdpsrv|Name=@FirewallAPI.dll,-30511|Desc=@FirewallAPI.dll,-30514|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-UPnPHost-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=2869|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-30515|Desc=@FirewallAPI.dll,-30518|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - 
       WPDMTP-UPnPHost-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=fdphost|Name=@FirewallAPI.dll,-30519|Desc=@FirewallAPI.dll,-30522|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       WPDMTP-UPnP-Out-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\svchost.exe|Svc=upnphost|Name=@FirewallAPI.dll,-30523|Desc=@FirewallAPI.dll,-30524|EmbedCtxt=@FirewallAPI.dll,-30502| - Enabled - Microsoft Corporation
       NetPres-In-TCP-NoScope --> C:\Windows\System32\NetProj.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31761|Desc=@FirewallAPI.dll,-31764|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - Microsoft Corporation
       NetPres-Out-TCP-NoScope --> C:\Windows\System32\NetProj.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31765|Desc=@FirewallAPI.dll,-31768|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - Microsoft Corporation
       NetPres-WSDEVNT-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5357|App=System|Name=@FirewallAPI.dll,-31769|Desc=@FirewallAPI.dll,-31770|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNT-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5357|App=System|Name=@FirewallAPI.dll,-31771|Desc=@FirewallAPI.dll,-31772|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-In-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|LPort=5358|App=System|Name=@FirewallAPI.dll,-31773|Desc=@FirewallAPI.dll,-31774|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-Out-TCP-NoScope --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Domain|RPort=5358|App=System|Name=@FirewallAPI.dll,-31775|Desc=@FirewallAPI.dll,-31776|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSD-In-UDP --> C:\Windows\System32\NetProj.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31753|Desc=@FirewallAPI.dll,-31756|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - Microsoft Corporation
       NetPres-WSD-Out-UDP --> C:\Windows\System32\NetProj.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=17|RPort=3702|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31757|Desc=@FirewallAPI.dll,-31760|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - Microsoft Corporation
       NetPres-In-TCP --> C:\Windows\System32\NetProj.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31761|Desc=@FirewallAPI.dll,-31764|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - Microsoft Corporation
       NetPres-Out-TCP --> C:\Windows\System32\NetProj.exe - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RA4=LocalSubnet|RA6=LocalSubnet|App=%SystemRoot%\system32\netproj.exe|Name=@FirewallAPI.dll,-31765|Desc=@FirewallAPI.dll,-31768|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - Microsoft Corporation
       NetPres-WSDEVNT-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31769|Desc=@FirewallAPI.dll,-31770|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNT-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5357|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31771|Desc=@FirewallAPI.dll,-31772|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Private|Profile=Public|LPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31773|Desc=@FirewallAPI.dll,-31774|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       NetPres-WSDEVNTS-Out-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=Out|Protocol=6|Profile=Private|Profile=Public|RPort=5358|RA4=LocalSubnet|RA6=LocalSubnet|App=System|Name=@FirewallAPI.dll,-31775|Desc=@FirewallAPI.dll,-31776|EmbedCtxt=@FirewallAPI.dll,-31752| - Enabled - 
       {CE94ECFF-D337-4E51-AA29-D195227FAE4E} --> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe|Name=Daemonu.exe| - Enabled - NVIDIA Corporation
       {1D2D0262-1F4B-481A-A455-6D3EC6965C61} --> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe|Name=Daemonu.exe| - Enabled - NVIDIA Corporation
       {2C3EC568-D700-46A0-BD0D-99205446A6D9} --> C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=808|App=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe|Svc=NetTcpActivator|Name=@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelEvents.dll,-2000|Desc=@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelEvents.dll,-2001|EmbedCtxt=@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelEvents.dll,-2002| - Enabled - Microsoft Corporation
       {49AAAC67-1E02-4A99-BA7B-2908336E4A77} --> C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe|Name=Battlefield 3| - Enabled - EA Digital Illusions CE AB
       {672F5C29-A54E-4CD0-9B60-B8F38F7F0F28} --> C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe|Name=Battlefield 3| - Enabled - EA Digital Illusions CE AB
       {BA186877-885A-427A-A7E9-98000CCA3036} --> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe|Name=ESN Sonar Host Application| - Enabled - ESN Social Software AB
       {972F7FA3-18A2-4CEB-AA63-AFC8CFBDD9AA} --> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe|Name=ESN Sonar Host Application| - Enabled - ESN Social Software AB
       {406A504C-5E88-4D4B-A854-251293C3807D} --> C:\Program Files (x86)\Skype\Phone\Skype.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\Skype\Phone\Skype.exe|Name=Skype| - Enabled - Skype Technologies S.A.
       {AE407C55-3A49-42F8-9D13-ED18E262926E} --> C:\Program Files (x86)\Steam\steam.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Steam\Steam.exe|Name=Steam| - Enabled - Valve Corporation
       {7A7349E7-3B18-4071-9FC2-0652E0C586EA} --> C:\Program Files (x86)\Steam\steam.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Steam\Steam.exe|Name=Steam| - Enabled - Valve Corporation
       RemoteDesktop-In-TCP --> System - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=3389|App=System|Name=@FirewallAPI.dll,-28753|Desc=@FirewallAPI.dll,-28756|EmbedCtxt=@FirewallAPI.dll,-28752| - Enabled - 
       RemoteDesktop-UserMode-In-TCP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|LPort=3389|App=%SystemRoot%\system32\svchost.exe|Svc=termservice|Name=@FirewallAPI.dll,-28853|Desc=@FirewallAPI.dll,-28856|EmbedCtxt=@FirewallAPI.dll,-28852| - Enabled - Microsoft Corporation
       RemoteDesktop-UserMode-In-UDP --> C:\Windows\System32\svchost.exe - v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|LPort=3389|App=%SystemRoot%\system32\svchost.exe|Svc=termservice|Name=@RdpGroupPolicyExtension.dll,-101|Desc=@RdpGroupPolicyExtension.dll,-102|EmbedCtxt=@FirewallAPI.dll,-28852| - Enabled - Microsoft Corporation
       {0171D3ED-487B-467E-8B98-297795CD6861} --> C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe|Name=Call of Duty: Modern Warfare 2 - Multiplayer| - Enabled - 
       {DC56E12D-2CDD-456D-8401-C9AC6A69DBD2} --> C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe|Name=Call of Duty: Modern Warfare 2 - Multiplayer| - Enabled - 
       {CE2C9A20-FE8C-464B-806D-0B57B133EEC8} --> C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe|Name=Call of Duty: Modern Warfare 2| - Enabled - 
       {49286ECC-5BF7-42AB-B680-E06F30BB832B} --> C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe|Name=Call of Duty: Modern Warfare 2| - Enabled - 
       {555A2AD5-D885-447A-A80A-D2DD36E7DB4D} --> C:\Program Files (x86)\Nokia\nokia suite\nokiasuite.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|App=C:\Program Files (x86)\nokia\nokia suite\nokiasuite.exe|Name=Nokia Suite|Desc=Nokia Suite| - Enabled - Nokia
       {88C94419-994C-4245-8F17-9FE707FE97A0} --> C:\Windows\SysWOW64\PnkBstrA.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\SysWOW64\PnkBstrA.exe|Name=PnkBstrA| - Enabled - 
       {5FDABB08-443C-48B2-B74D-32B2F0B5F258} --> C:\Windows\SysWOW64\PnkBstrA.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\SysWOW64\PnkBstrA.exe|Name=PnkBstrA| - Enabled - 
       {28FCDA42-7096-405B-BA6D-A221FD18B155} --> C:\Windows\SysWOW64\PnkBstrB.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Windows\SysWOW64\PnkBstrB.exe|Name=PnkBstrB| - Enabled - 
       {DD5B3AE6-B826-4FA7-B217-243237EFC9ED} --> C:\Windows\SysWOW64\PnkBstrB.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Windows\SysWOW64\PnkBstrB.exe|Name=PnkBstrB| - Enabled - 
       {3CF1329A-BD38-4632-8794-C533FD620B19} --> C:\Users\JerryMX\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Users\JerryMX\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe|Name=Google Talk Plugin| - Enabled - Google
       {014FACE9-A489-4BEF-AD85-FE7512C0082D} --> C:\Users\JerryMX\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Users\JerryMX\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe|Name=Google Talk Plugin| - Enabled - Google
       {38A23A7B-7C3B-4ABA-9E50-21B608A04006} --> System - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=58|ICMP6=128:*|App=System|Name=@IpHlpSvc.dll,-502|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       {ACE834FB-9BF9-4BE4-8AAD-1EDC40274CE1} - v2.10|Action=Allow|Active=TRUE|Dir=Out|Protocol=58|ICMP6=128:*|Name=@IpHlpSvc.dll,-503|Desc=@FirewallAPI.dll,-28547|EmbedCtxt=@FirewallAPI.dll,-25000| - Enabled - 
       {2CEB0BA8-382C-41F7-BA4C-BDAAC0117CCD} --> C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Public|App=C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe|Name=Left 4 Dead 2| - Enabled - 
       {5371F886-2517-49B4-9961-4534DF4C2785} --> C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe - v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Public|App=C:\Program Files (x86)\Steam\steamapps\common\left 4 dead 2\left4dead2.exe|Name=Left 4 Dead 2| - Enabled - 

==========================================================================================

Scan MBR Rootkit

       MBR OK!
