Go Back   Cyber Tech Help Support Forums > Operating Systems > Older Windows Versions > Windows Vista

Notices

Windows Vista Problem solving for the Windows Vista Operating System. Please remember to state which edition of Vista you are using - Home Basic, Home Premium, Business, Ultimate etc. and whether you are using the 32-bit or 64-bit version if you know.

Reply
 
Topic Tools
  #1  
Old June 4th, 2009, 04:43 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
Computer suddenly changed! - moved by Jintan

Not too long ago my computer has suddenly becaming weird, it suddenly blocked my avg from running.

---------------------------
avgtray.exe - Bad Image
---------------------------
C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a 1e18e3b_8.0.50727.4016_none_d0893820442e7fe4\MSVCR 80.dll is either not designed to run on Windows or it contains an error. Try installing the program again using the original installation media or contact your system administrator or the software vendor for support.
---------------------------
OK
---------------------------

And there is quite alot of pop up error messages, my taskbar totally changed into white colour, after all those matters restarted my computer, in the beginning after the bio screen there is this black screen with alot of sentence stated "Deleting orphan file record segment" it keep on repeating and below it was "1165 large file records processed", "0 bad file records processes.", "CHKDSK is verifying indexes". In my startup my taskbar return to normal but it popped lots of error message, one say something has blocked my avg from running, another one say it blocked my Applesync from running. I tried to run RSIT but it also blocked it from running so i cannot paste the log here.

(This is the error that blocked RSIT)

---------------------------
AutoIt Error
---------------------------
Line -1:


Error: Incorrect number of parameters in function call.
---------------------------
OK
---------------------------

I can at least still run HiJackThis, here's the log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:32:11 PM, on 4/6/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll (file missing)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-21-2352327303-1195152067-1252143871-1000\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (User '?')
O4 - HKUS\S-1-5-21-2352327303-1195152067-1252143871-1000\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe (User '?')
O4 - .DEFAULT User Startup: Think Green Weather.lnk = C:\Program Files\Stardock\DesktopGadgets\Think Green Weather\Think Green Weather.exe (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - (no file)
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.1.11.30.dll/206 (file missing)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\Object Desktop\MyColors\VistaSrv.exe

--
End of file - 5895 bytes

Another Log from Malwarebytes' Anti-Malware:

Malwarebytes' Anti-Malware 1.37
Database version: 2227
Windows 6.0.6002 Service Pack 2

4/6/2009 2:05:40 PM
mbam-log-2009-06-04 (14-05-40).txt

Scan type: Full Scan (C:\|)
Objects scanned: 172921
Time elapsed: 2 hour(s), 16 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 14
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\nowstarter.nowstarterctrl.1 (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{072039ab-2117-4ed5-a85f-9b9eb903e021} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{072039ab-2117-4ed5-a85f-9b9eb903e021} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{072039ab-2117-4ed5-a85f-9b9eb903e021} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{6f553c18-15e6-4e5e-8f44-add50de754ed} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{0409743c-e5e3-4bdd-9ec7-eff622530282} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{40722371-e24c-4b36-8e76-010bb6c7185b} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{825c19d3-35ce-428f-876b-88e080466689} (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\ModuleUsage\c:/windows/system32/nowstarter.ocx (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{497dddb6-6eee-4561-9621-b77dc82c1f84} (Adware.Ascentive) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{4e980492-027b-47f1-a7ab-ab086dacbb9e} (Adware.Ascentive) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{5ead8321-fcbb-4c3f-888c-ac373d366c3f} (Adware.Ascentive) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{31f3cf6e-a71a-4daa-852b-39ac230940b4} (Adware.Ascentive) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall\dbar (Adware.SoftMate) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs\C:\Windows\system32\NowStart er.ocx (Adware.CWS) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\SharedDLLs\c:\Windows\System32\SysResto re.dll (Adware.Ascentive) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\System32\NowStarter.ocx (Adware.CWS) -> Quarantined and deleted successfully.
c:\Windows\System32\SysRestore.dll (Adware.Ascentive) -> Quarantined and deleted successfully.

Any Help Would Be Appreciated.
THANKs

Last edited by Js.tan; June 4th, 2009 at 07:33 AM.
Reply With Quote
  #2  
Old June 6th, 2009, 04:22 AM
Jintan's Avatar
Jintan Jintan is offline
Cyber Tech Help Moderator
 
Join Date: Dec 2004
Posts: 52,284
Hello Js.tan,

Always seems tougher when folks start their own repairs. Let's get some current information and see what is there now.


To keep them from interfering with the repairs, be sure to temporarily disable all antivirus/anti-spyware softwares while these steps are being completed. This can usually be done through right clicking the software's Taskbar icons, or accessing each software through Start - Programs.


Download RSIT (random's system information tool) from here to your desktop, then click on the RSIT.exe to start the scan.

If necessary allow it to locate or download a copy of HijackThis as needed.

Once the scan completes a textbox will open - copy/paste those contents here for review please. The log can also be found at C:\rsit\log.txt.

RSIT will also create a second log, info.txt, which will be minimized to your taskbar. Post that here as well please (it will also be stored at C:\rsit\info.txt).

You can break logs into parts and use separate posts here when replying and posting the log files, if needed.

--------------

Also click here and download the installer for Gmer to your desktop, then click that file to run Gmer.


If on it's opening scan Gmer locates items shown in red or indicates "hidden" or "rootkit", stop there, and click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please. We don't want any crashes just from taking an initial look at things.

If not, then click on Scan (before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan).

When completed, click on the Copy button and rightclick on your Desktop, choose "New" > Text document. Once the file is created, open it and rightclick again and choose Paste. Copy the information and post it here please.
Reply With Quote
  #3  
Old June 6th, 2009, 09:37 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
I apologize for starting my own repairs because I'm in a rash to repair it, and something seen to be blocking me from downloading Gmer, when the download is done the dialog box will close automatically and the stuff i downloaded was not in the place i saved, this happen to every files i downloaded.

Something was blocking me from running RSIT too.

here's the error pop up.

---------------------------
AutoIt Error
---------------------------
Line -1:


Error: Incorrect number of parameters in function call.
---------------------------
OK
---------------------------

Last edited by Js.tan; June 6th, 2009 at 09:50 AM.
Reply With Quote
  #4  
Old June 7th, 2009, 01:44 AM
Jintan's Avatar
Jintan Jintan is offline
Cyber Tech Help Moderator
 
Join Date: Dec 2004
Posts: 52,284
We will switch scan tools.


Click here and download sUBs' dds.scr to your desktop, then click that to run the scan. A window will open while the scan runs, and when it completes two logs will open in Notepad - DDS.txt and Attach.txt. An additional message box will open that you can just X close.

Save those two log files to your desktop (go to File - Save As and browse to your desktop to save each), then post both of them back here please.
Reply With Quote
  #5  
Old June 7th, 2009, 01:54 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
It's still the same, the dialog box closed and the stuff i downloaded is not at the place i saved.
Reply With Quote
  #6  
Old June 7th, 2009, 03:14 AM
Jintan's Avatar
Jintan Jintan is offline
Cyber Tech Help Moderator
 
Join Date: Dec 2004
Posts: 52,284
PM me an email address to send some scan tools to as attachments.
Reply With Quote
  #7  
Old June 8th, 2009, 01:32 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
i still cannot get those stuff from my mail, what's the thing that keep on blocking it. I will download those files on my laptop and transfer here using a USB.
Reply With Quote
  #8  
Old June 8th, 2009, 01:47 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
I cannot run RSIT, here's Gmer. this is before scan.

GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-08 08:46:18
Windows 6.0.6002 Service Pack 2


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs InCDrec.SYS (InCD File System Recognizer/Nero AG)
AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\fastfat \Fat InCDrec.SYS (InCD File System Recognizer/Nero AG)
AttachedDevice \Driver\tdx \Device\Ip avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

---- EOF - GMER 1.0.15 ----

Scanned Log.

GMER 1.0.15.14972 - http://www.gmer.net
Rootkit scan 2009-06-08 09:04:42
Windows 6.0.6002 Service Pack 2


---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!CreateWindowExW 76D11305 5 Bytes JMP 6E5D4832 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!DialogBoxParamW 76D310B0 5 Bytes JMP 6E4F9315 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!DialogBoxIndirectParamW 76D32EF5 5 Bytes JMP 6E6EE021 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!DialogBoxParamA 76D48152 5 Bytes JMP 6E6EDFBE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!DialogBoxIndirectParamA 76D4847D 5 Bytes JMP 6E6EE084 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!MessageBoxIndirectA 76D5D4D9 5 Bytes JMP 6E6EDF51 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!MessageBoxIndirectW 76D5D5D3 5 Bytes JMP 6E6EDEE6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!MessageBoxExA 76D5D639 5 Bytes JMP 6E6EDE84 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3860] USER32.dll!MessageBoxExW 76D5D65D 5 Bytes JMP 6E6EDE22 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!CreateDialogParamW 76D072A2 5 Bytes JMP 6E5D4D10 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!GetAsyncKeyState 76D0863C 5 Bytes JMP 6E4F01CD C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!SetWindowsHookExW 76D087AD 5 Bytes JMP 6E5CDBCB C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!CallNextHookEx 76D08E3B 5 Bytes JMP 6E5CDD81 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!UnhookWindowsHookEx 76D098DB 5 Bytes JMP 6E531CA2 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!EnableWindow 76D0CD8B 5 Bytes JMP 6E5D4B9D C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!CreateWindowExW 76D11305 5 Bytes JMP 6E5D4832 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!GetKeyState 76D18CB1 3 Bytes JMP 6E5D416B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!GetKeyState + 4 76D18CB5 1 Byte [F7]
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!IsDialogMessageW 76D20745 5 Bytes JMP 6E4F9827 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!CreateDialogParamA 76D217AA 5 Bytes JMP 6E6EE93E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!IsDialogMessage 76D21847 5 Bytes JMP 6E6EE345 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!CreateDialogIndirectParamA 76D226F1 5 Bytes JMP 6E6EE975 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!CreateDialogIndirectParamW 76D29A62 5 Bytes JMP 6E6EE9AC C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!SetKeyboardState 76D30987 5 Bytes JMP 6E6EE6B4 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!DialogBoxParamW 76D310B0 5 Bytes JMP 6E4F9315 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!DialogBoxIndirectParamW 76D32EF5 5 Bytes JMP 6E6EE021 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!SendInput 76D32F75 5 Bytes JMP 6E6EF02B C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!EndDialog 76D3326E 5 Bytes JMP 6E4FBC49 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!DialogBoxParamA 76D48152 5 Bytes JMP 6E6EDFBE C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!DialogBoxIndirectParamA 76D4847D 5 Bytes JMP 6E6EE084 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!MessageBoxIndirectA 76D5D4D9 5 Bytes JMP 6E6EDF51 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!MessageBoxIndirectW 76D5D5D3 5 Bytes JMP 6E6EDEE6 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!MessageBoxExA 76D5D639 5 Bytes JMP 6E6EDE84 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!MessageBoxExW 76D5D65D 5 Bytes JMP 6E6EDE22 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] USER32.dll!keybd_event 76D5D972 5 Bytes JMP 6E6EF257 C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] SHELL32.dll!SHRestricted + D95 75D78988 4 Bytes [9D, 2F, C8, 6F]
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] SHELL32.dll!SHRestricted + D9D 75D78990 8 Bytes [A7, 2E, C8, 6F, 49, 5A, C7, ...]
.text C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] ole32.dll!CoCreateInstance 76869EA6 5 Bytes JMP 6E5D488E C:\Windows\system32\IEFRAME.dll (Internet Explorer/Microsoft Corporation)

Last edited by Js.tan; June 8th, 2009 at 02:07 AM.
Reply With Quote
  #9  
Old June 8th, 2009, 02:09 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ADVAPI32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\RPCRT4.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SearchPathW] [6FC719F0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryExW] [6FC6FF7F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CopyFileW] [6FC6E0EC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!MoveFileW] [6FC70898] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!DeleteFileW] [6FC6ED49] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateProcessW] [6FC6A32B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6FC71C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindClose] [6FC739BC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindNextFileW] [6FC72879] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!FindFirstFileW] [6FC72F15] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryA] [6FC6FAE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!CreateFileW] [6FC6E763] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6FC6DB5F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!LoadLibraryW] [6FC6FC69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6FC6D3BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6FC7FB03] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegEnumValueW] [6FC8046D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegOpenKeyExW] [6FC7EA89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegQueryValueExW] [6FC7F767] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegDeleteKeyW] [6FC7EE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCreateKeyExW] [6FC7E511] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USER32.dll [ADVAPI32.dll!RegCloseKey] [6FC7ECE1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryExW] [6FC6FF7F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryA] [6FC6FAE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CopyFileW] [6FC6E0EC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!LoadLibraryW] [6FC6FC69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!CreateFileW] [6FC6E763] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!SearchPathW] [6FC719F0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\GDI32.dll [KERNEL32.dll!DeleteFileW] [6FC6ED49] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindClose] [6FC739BC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileA] [6FC72BB2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileA] [6FC72806] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindFirstFileW] [6FC72F15] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!FindNextFileW] [6FC72879] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesA] [6FC6BC77] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryA] [6FC71643] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesA] [6FC6BECD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryA] [6FC70E13] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryA] [6FC713ED] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileA] [6FC6EC1E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetFileAttributesW] [6FC6BDA2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetCurrentDirectoryW] [6FC71C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!SetFileAttributesW] [6FC6BFFE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateDirectoryW] [6FC70F41] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!DeleteFileW] [6FC6ED49] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileW] [6FC70898] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!RemoveDirectoryW] [6FC71518] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!MoveFileA] [6FC70825] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryA] [6FC6FAE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessA] [6FC69FA3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateProcessW] [6FC6A32B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileA] [6FC6E61A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!CreateFileW] [6FC6E763] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\msvcrt.dll [KERNEL32.dll!LoadLibraryW] [6FC6FC69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryW] [6FC6FC69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!ReplaceFileW] [6FC70B99] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!WritePrivateProfileStringW] [6FC6DB5F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringW] [6FC6D3BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetPrivateProfileStringA] [6FC6D264] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!DeleteFileW] [6FC6ED49] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryExW] [6FC6FF7F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesW] [6FC6BFFE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileW] [6FC6E763] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileW] [6FC72F15] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileW] [6FC72879] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
Reply With Quote
  #10  
Old June 8th, 2009, 02:10 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
.dll!SearchPathW] [6FC719F0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesW] [6FC6BDA2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SetFileAttributesA] [6FC6BECD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!CreateFileA] [6FC6E61A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindFirstFileA] [6FC72BB2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindNextFileA] [6FC72806] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!FindClose] [6FC739BC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!SearchPathA] [6FC722A9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetFileAttributesA] [6FC6BC77] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!LoadLibraryA] [6FC6FAE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpW] [6FC6F9AD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [USER32.dll!WinHelpA] [6FC6F876] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCloseKey] [6FC7ECE1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExA] [6FC7E389] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyA] [6FC7ED34] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyA] [6FC7F907] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExA] [6FC7E911] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegCreateKeyExW] [6FC7E511] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegOpenKeyExW] [6FC7EA89] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExW] [6FC8015D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueW] [6FC7F42B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegDeleteKeyW] [6FC7EE7D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryInfoKeyW] [6FC7FB03] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExW] [6FC7F767] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueW] [6FC8046D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyW] [6FC7FE69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyExA] [6FC7FFD5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumValueA] [6FC802E5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegEnumKeyA] [6FC7FCFF] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHLWAPI.dll [ADVAPI32.dll!RegQueryValueExA] [6FC7F5C7] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionW] [6FC6CEAB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindNextFileW] [6FC72879] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!ReplaceFileW] [6FC70B99] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileSectionNamesW] [6FC6D12D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileSectionW] [6FC6D8DD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!WritePrivateProfileStringW] [6FC6DB5F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateHardLinkW] [6FC6EA6B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetCurrentDirectoryW] [6FC71C5A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CopyFileW] [6FC6E0EC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetBinaryTypeW] [6FC6C9AA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryExW] [6FC6FF7F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateProcessW] [6FC6A32B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileW] [6FC70898] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindFirstFileW] [6FC72F15] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!FindClose] [6FC739BC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameA] [6FC6C60C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesA] [6FC6BC77] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SearchPathW] [6FC719F0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileIntW] [6FC6CC23] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetPrivateProfileStringW] [6FC6D3BB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!RemoveDirectoryW] [6FC71518] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateDirectoryW] [6FC70F41] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!DeleteFileW] [6FC6ED49] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!SetFileAttributesW] [6FC6BFFE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesW] [6FC6BDA2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] [6FC708BD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetShortPathNameW] [6FC6C74B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryW] [6FC6FC69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!CreateFileW] [6FC6E763] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetFileAttributesExW] [6FC6C26B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!LoadLibraryA] [6FC6FAE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [KERNEL32.dll!GetLongPathNameW] [6FC6C4DB] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [USER32.dll!LoadImageW] [6FC6EFD3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [USER32.dll!WinHelpW] [6FC6F9AD] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [USER32.dll!PrivateExtractIconsW] [6FC6F4C8] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCreateFromUrlW] [6FC764B9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringByKeyW] [6FC760EA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHCreateStreamOnFileW] [6FC77474] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
Reply With Quote
  #11  
Old June 8th, 2009, 02:11 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryKeyW] [6FC75F8D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!AssocQueryStringW] [6FC7603A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyA] [6FC774C6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathCombineW] [6FC76412] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHOpenRegStream2W] [6FC77879] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryW] [6FC7672E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsURLW] [6FC76D24] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootA] [6FC769DA] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRootW] [6FC76A26] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripToRootW] [6FC77160] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFindOnPathW] [6FC765F5] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathStripPathW] [6FC770CC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRemoveArgsW] [6FC76F00] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetBoolUSValueW] [6FC77E9D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathSkipRootW] [6FC77038] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryEmptyW] [6FC767C6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsSystemFolderW] [6FC76AC1] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsDirectoryA] [6FC766E2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathRelativePathToW] [6FC76E60] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootA] [6FC76284] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetPathW] [6FC77F9C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegSetPathW] [6FC783F2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetUSValueW] [6FC78055] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHQueryValueExW] [6FC77A83] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHRegGetValueW] [6FC78114] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsNetworkPathW] [6FC7685E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerShareW] [6FC76C8C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCServerW] [6FC76BF4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathUnExpandEnvStringsW] [6FC771FE] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathMakeSystemFolderW] [6FC76DBC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsUNCW] [6FC76B5C] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathIsRelativeW] [6FC7698E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHGetValueW] [6FC777C9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathBuildRootW] [6FC762D3] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteValueW] [6FC775B6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHSetValueW] [6FC78611] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumKeyExW] [6FC7765D] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHEnumValueW] [6FC77710] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!PathFileExistsW] [6FC7655A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [SHLWAPI.dll!SHDeleteKeyW] [6FC77515] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SHELL32.dll [ntdll.dll!NtQueryDirectoryFile] [6FC6BA3A] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindClose] [6FC739BC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!FindFirstFileW] [6FC72F15] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryExW] [6FC6FF7F] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!SearchPathW] [6FC719F0] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateProcessW] [6FC6A32B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!DeleteFileW] [6FC6ED49] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetShortPathNameW] [6FC6C74B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesExW] [6FC6C26B] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!CreateFileW] [6FC6E763] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryW] [6FC6FC69] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!GetFileAttributesW] [6FC6BDA2] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ole32.dll [KERNEL32.dll!LoadLibraryA] [6FC6FAE4] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\USERENV.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\Secur32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueW] [6FC78114] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHRegGetValueA] [6FC780B6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
Reply With Quote
  #12  
Old June 8th, 2009, 02:12 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathUnExpandEnvStringsA] [6FC771AC] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteKeyA] [6FC774C6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHDeleteValueW] [6FC775B6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCreateFromUrlW] [6FC764B9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueA] [6FC7776E] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueA] [6FC785B6] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHGetValueW] [6FC777C9] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!SHSetValueW] [6FC78611] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [SHLWAPI.dll!PathCombineW] [6FC76412] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\WININET.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\ws2_32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\CRYPT32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\SAMLIB.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\NETAPI32.dll [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)
IAT C:\Program Files\Internet Explorer\IEXPLORE.EXE[3888] @ C:\Windows\system32\IPHLPAPI.DLL [KERNEL32.dll!GetProcAddress] [6FC68221] C:\Program Files\Internet Explorer\IEShims.dll (Internet Explorer Compatibility Shims/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\Ntfs \Ntfs InCDrec.SYS (InCD File System Recognizer/Nero AG)
AttachedDevice \Driver\tdx \Device\Tcp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\Udp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)
AttachedDevice \Driver\tdx \Device\RawIp avgtdix.sys (AVG Network connection watcher/AVG Technologies CZ, s.r.o.)

Device fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation)

AttachedDevice fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device InCDFs.sys (InCD File System Driver/Nero AG)

---- EOF - GMER 1.0.15 ----
Reply With Quote
  #13  
Old June 8th, 2009, 02:24 AM
Jintan's Avatar
Jintan Jintan is offline
Cyber Tech Help Moderator
 
Join Date: Dec 2004
Posts: 52,284
A lot of activity with Internet Explorer in that Gmer log, but no specific target to address. See if you can uninstall AVG. Not quite sure where or what but it apparently is corrupted in some way there. Reboot, then check if things improved as far as ability to do scans/download correctly.
Reply With Quote
  #14  
Old June 8th, 2009, 02:27 AM
Js.tan Js.tan is offline
Senior Member
 
Join Date: Oct 2008
Posts: 112
Not just AVG was blocked, there is quite a lot of stuff being blocked. Do I have to reinstall all of them?
Reply With Quote
  #15  
Old June 8th, 2009, 03:05 AM
Jintan's Avatar
Jintan Jintan is offline
Cyber Tech Help Moderator
 
Join Date: Dec 2004
Posts: 52,284
I sent a different file from a different email account than the last time to speed things up. Unzip the attachment, then click the file to install the program. Once installed go to Start - Programs and open Agent Ransack.

Under the Advanced tab, type the following, exactly as shown, into the text box next to "Containing text:"

MSVCR80.dll

Make no other changes at this time. Then click the "Start search" button (upper right corner) and allow Agent Ransack to search. This will take quite a while to complete, depending on the number of files stored on the system, so please allow the scan to complete and not use the computer while it is running.

When the scan is done go to File - Save Results, and click the "Save" button to save the information to your clipboard. The open Notepad and click Paste to copy the scan results. Save this as Life.txt.

Zip a copy of that file, and send it to jintan@malwarecrypt.com as an attachment. Please place "Submitted Files -Js.tan/cth/ransack" as the email Subject.
Reply With Quote
Reply

Bookmarks


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Topics
Topic Topic Starter Forum Replies Last Post
My computer has a virus!! - moved by Jintan anayeknamwen Malware Removal 90 February 14th, 2013 12:33 AM
Cleaning out Computer help!! - moved by Jintan goonproductions Malware Removal 24 January 17th, 2013 12:26 AM
Computer shut down by itself - moved by Jintan wolflmg Malware Removal 32 November 18th, 2012 12:27 AM
Computer may be infected - Moved by Jintan Jerry56 Windows XP 97 October 4th, 2012 12:35 AM
Computer language suddenly changed..Why? ting Windows 98 1 September 3rd, 2005 10:24 PM


All times are GMT +1. The time now is 11:46 PM.