Gmer Log file, this took quite awhile. Had to edit it by removing spaces.
GMER 1.0.15.15641 -
http://www.gmer.netRootkit scan 2011-08-24 03:38:45
Windows 5.1.2600 Service Pack 2 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T1L0-e ST31000528AS rev.CC38
Running: gmer.exe; Driver: C:\DOCUME~1\MJ\LOCALS~1\Temp\kgkdqfob.sys
---- System - GMER 1.0.15 ----
SSDT ; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwAdjustPrivilegesToken [0xB149E8B2]
SSDT; B87E7344; ZwClose
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwConnectPort [0xB149DE48]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateFile [0xB149E518]
SSDT; B87E72FE; ZwCreateKey
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreatePort [0xB149DD28]
SSDT; B87E734E; ZwCreateSection
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateSymbolicLinkObject [0xB14A1568]
SSDT; B87E72F4; ZwCreateThread
SSDT; B87E7303; ZwDeleteKey
SSDT; B87E730D; ZwDeleteValueKey
SSDT; B87E733F; ZwDuplicateObject
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwEnumerateKey [0xB149F864]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwEnumerateValueKey [0xB149FABA]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwLoadDriver [0xB14A0BF0]
SSDT; B87E7312; ZwLoadKey
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwMakeTemporaryObject [0xB149E110]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenFile [0xB149E6F4]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenKey [0xB149F116]
SSDT; B87E72E0; ZwOpenProcess
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenSection [0xB149E3B4]
SSDT; B87E72E5; ZwOpenThread
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwQueryKey [0xB149FCC8]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwQueryMultipleValueKey [0xB14A011C]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwQueryValueKey [0xB149FEDA]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwRenameKey [0xB149F67C]
SSDT; B87E731C; ZwReplaceKey
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwRequestWaitReplyPort [0xB14A068C]
SSDT; B87E7317; ZwRestoreKey
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSecureConnectPort [0xB14A0940]
SSDT; B87E7353; ZwSetContextThread
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSetSecurityObject [0xB149EEEE]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSetSystemInformation [0xB14A0EE8]
SSDT; B87E7308; ZwSetValueKey
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwShutdownSystem [0xB149E07A]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSystemDebugControl [0xB149E2A0]
SSDT; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS (SASKUTIL.SYS/SUPERAdBlocker.com and SUPERAntiSpyware.com) ZwTerminateProcess [0xB12BD640]
SSDT; \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwTerminateThread [0xB149D918]
Code; \??\C:\DOCUME~1\MJ\LOCALS~1\Temp\catchme.sys pIofCallDriver
---- Kernel code sections - GMER 1.0.15 ----
.text; ntkrnlpa.exe!ZwCallbackReturn + 2BC4 80503998 4 Bytes CALL B424EAE6
.text; ntkrnlpa.exe!ZwCallbackReturn + 2F58 80503D2C 4 Bytes CALL A701873F
?; brxi.sys; The system cannot find the file specified. !
.text; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB629A3A0, 0x88C445, 0xE8000020]
.text; C:\WINDOWS\system32\drivers\hardlock.sys section is writeable [0xAF68D400, 0x7960C, 0xE8000020]
.protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0xAF72F420] C:\WINDOWS\system32\drivers\hardlock.sys entry point in ".protectÿÿÿÿhardlockentry point in ".protectÿÿÿÿhardlockentry point in ".p" section [0xAF72F420]
.protectÿÿÿÿhardlockunknown last code section [0xAF72F200, 0x5049, 0xE0000020] C:\WINDOWS\system32\drivers\hardlock.sys unknown last code section [0xAF72F200, 0x5049, 0xE0000020]
?; C:\WINDOWS\system32\Drivers\PROCEXP113.SYS The system cannot find the file specified. !
?; C:\DOCUME~1\MJ\LOCALS~1\Temp\catchme.sys The system cannot find the file specified. !
---- User code sections - GMER 1.0.15 ----
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe[192] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] shell32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] shell32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] shell32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\PowerISO\PWRISOVM.EXE[208] shell32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] WS2_32.dll!WSASocketW 71AB39CB 7 Bytes JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.EXE[252] WS2_32.dll!WSASocketA 71AB8769 5 Bytes JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[260] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\RTHDCPL.EXE[308] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\spoolsv.exe[564] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] WS2_32.dll!WSASocketW 71AB39CB 7 Bytes JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] WS2_32.dll!WSASocketA 71AB8769 5 Bytes JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\sched.exe[612] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\wuauclt.exe[688] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[708] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] WS2_32.dll!WSASocketW 71AB39CB 7 Bytes JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] WS2_32.dll!WSASocketA 71AB8769 5 Bytes JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Java\jre6\bin\jqs.exe[720] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe[952] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtReplyWaitReceivePort 7C90DA8E 5 Bytes JMP 10028AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtReplyWaitReceivePortEx 7C90DA9E 5 Bytes JMP 10028870 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\services.exe[1100] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] WS2_32.dll!WSASocketW 71AB39CB 7 Bytes JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] WS2_32.dll!WSASocketA 71AB8769 5 Bytes JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\lsass.exe[1112] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avguard.exe[1280] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\ctfmon.exe[1380] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Avira\AntiVir Desktop\avshadow.exe[1404] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe[1548] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1560] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1628] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ADVAPI32.DLL!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] ADVAPI32.DLL!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] USER32.DLL!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] OLE32.DLL!CoCreateInstanceEx 11C75FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe[1688] OLE32.DLL!CoGetClassObject 11C8F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\tsnp2uvc.exe[1700] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] SHELL32.dll!ShellExecuteW 7CAB4FD0 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE[1728] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] WS2_32.dll!WSASocketW 71AB39CB 7 Bytes JMP 10027970 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] WS2_32.dll!WSASocketA 71AB8769 5 Bytes JMP 10027990 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\Bonjour\mDNSResponder.exe[1760] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1772] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 005166A0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe[1772] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 0052E5C0 C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtAllocateVirtualMemory 7C90CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtClose 7C90CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtCreateFile 7C90D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtCreateProcess 7C90D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtCreateProcessEx 7C90D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtDeleteFile 7C90D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtFreeVirtualMemory 7C90D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtLoadDriver 7C90D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtOpenFile 7C90D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtProtectVirtualMemory 7C90D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtSetInformationProcess 7C90DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtUnloadDriver 7C90DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!NtWriteVirtualMemory 7C90DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!RtlAllocateHeap 7C9100C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!LdrLoadDll 7C915CBB 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!LdrUnloadDll 7C916C83 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ntdll.dll!LdrGetProcedureAddress 7C919328 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CreateFileA 7C801A24 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!VirtualProtect 7C801AD0 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!LoadLibraryExW 7C801AF1 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!LoadLibraryExA 7C801D4F 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!LoadLibraryA 7C801D77 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CreateProcessW 7C802332 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CreateProcessA 7C802367 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!GetProcAddress 7C80ADB0 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!LoadLibraryW 7C80AE5B 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!GetModuleHandleA 7C80B6B1 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!GetModuleHandleW 7C80E44D 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CreateFileW 7C810770 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!MoveFileWithProgressW 7C81F73E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!MoveFileW 7C821271 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!OpenFile 7C821992 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CopyFileExW 7C827B42 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CopyFileA 7C8286FE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CopyFileW 7C82F88F 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!DeleteFileA 7C831EF5 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!DeleteFileW 7C831F7B 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!MoveFileExW 7C8356A3 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!MoveFileA 7C835ED7 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!MoveFileWithProgressA 7C835EF6 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!MoveFileExA 7C85D653 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!CopyFileExA 7C85E554 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!WinExec 7C86158D 5 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] kernel32.dll!LoadModule 7C86169E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ADVAPI32.dll!CreateProcessAsUserW 77DF6285 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ADVAPI32.dll!CreateProcessAsUserA 77E109B0 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] USER32.dll!EndTask 77D89C9D 5 Bytes JMP 1002DFA0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ole32.dll!CoCreateInstanceEx 77525FB1 5 Bytes JMP 1002E420 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] ole32.dll!CoGetClassObject 7753F356 5 Bytes JMP 1002E1E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] SHELL32.dll!ShellExecuteExW 7CA01823 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] SHELL32.dll!ShellExecuteEx 7CA40C15 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] SHELL32.dll!ShellExecuteA 7CA40F40 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text; C:\WINDOWS\system32\svchost.exe[1804] SHELL32.dll!ShellExecuteW