Greetings, I have read many posts on the BB about fake AV software. This is what I had. I have run ComboFix, HJT, OTMoveIt, VundoFix, WinPFind3u, SDFix, and ATF-Cleaner. I continue to get the following popup - "Cannot find 'C:\WINDOWS\system32\drivers\detect.htm'. Make sure the path or Internet address is correct." Once I close the window I can continue on, but occassionally have additional slowness.
I also encounter two other issues: 1) on google search result pages, if I click on the link it takes me to ad pages or something other then the link I clicked on (if it is a lavasoft page it gives me either a blank page or a page that is red), yet it opens normally if I right click on it and tell it to open in a new window; 2) when I reboot I get an Unhandled Exception error from aawservice.exe that says "An unhandled exception occured at 0x7C910F29 in aawservice.exe". That error info is posted here followed by the last Ad-Aware scan log and Hijackthis log.
Your assistance is greatly appreciated.
An unhandled exception occured at 0x7C910F29 in aawservice.exe
Exception Code : 0xc0000005
Client version : 0.669
Attached Debugger : 0
Windows Information :
---------------------
Windows Version : Windows XP (5.1)
Build Number : 2600
Service Pack : 2.0
CPU Information:
----------------
CPU Name : AMD Athlon™ 64 X2 Dual Core Processor 4200+
Type : 0
Vendor : AuthenticAMD
Family : 15
Extended Family : 0
Model : 11
Extended Model : 2
Stepping : 1
Registry Content:
-----------------
EAX : 0x02c25928
ECX : 0x00000001
EDX : 0x02c25860
EBX : 0x00b80000
ESP : 0x0100f92c
EBP : 0x0100f938
ESI : 0x02c25920
EDI : 0x02c25760
EIP : 0x7c910f29
Memory Usage:
-------------
Physical Memory in use : 10%
Total Physical Memory : 3078632 kb
Free Physical Memory : 2742436 kb
Total Virtual Memory : 2097024 kb
Free Virtual Memory : 1993316 kb
Max Page file size : 4388492 kb
Current Page file size : 4243136 kb
Free Extended memory : 0kb
Stack Information:
------------------
Total stack size : 1712
Stack Content:
--------------
00b80000 02c25770 00000000 0100fa0c 7c910d5c 02bd5430
00000001 0100f9f0 00000000 02be4650 02c25778 00b84590
00000000 00b84590 00450940 00406a29 00000000 7ffdb000
7ffdb000 7ffdb000 7ffdb000 0100fa9c 00469de3 00000001
0043a78a 0100f9c0 337d69c8 00beaea0 0100fb04 0043a7a5
0100fa70 7c910551 00000010 7c91056d 00beaea0 00bebbc0
00beaea0 00000000 00000000 00000000 00000000 00000000
00b80000 00b80000 00b80000 00000000 00000000 00000000
01010000 00000038 0100f950 0100f550 0100fa3c 7c90ee18
7c910570 00000001 0100fa4c 10068d90 00b80000 00000000
02c25778 337d9f95 02be4650 00b83cb0 00b84590 00b84590
0100fa20 0100f554 0100fc24 1006d520 227775d9 fffffffe
02c253d0 10054b7d 02c25778 02c25768 02c25788 00000000
00b83d70 0100fa84 00b83bf8 00000000 00b83bfc 00b83cb0
02c253d0 00000000 00000000 100598e4 00000000 00000000
00b83bf8 00beaea0 00b83d70 00000000 1005c8b1 00b83bb0
1000b42d 0048d49c 1000aedb 0042920a 337d69a0 00beaea0
0100fc6c 0100ffb0 00000131 00bec848 7c910570 ffffffff
00beb9f0 000001a0 0000003a 00000000 00000000 337d687c
00000000 00bec370 00000020 00beb9e8 00be0168 00bebbc0
00000000 00beb9e8 00000028 0000001a 0000001f 00010178
00000034 0100fa84 00be0000 0100fb70 7c90ee18 7c910570
00be0000 7c91056d 00450921 00be0000 00000000 00450940
000168e0 00000005 0100fab8 00000032 0100fba4 7c90ee18
7c910570 ffffffff 004774c0 0100fc6c 00be5690 00000000
00450940 337d68d4 0000000f 00bec7d8 00000000 00be5690
0100fb88 00000000 00000000 e7ffffff 00000000 00000000
00000000 00000000 00beb9c8 00000000 00000000 00000000
00000000 02020e7c 00000000 00152f08 02020e91 0000000d
0000000f 00473400 02020e91 02020e7c 00000000 00be5690
0100fc24 7c80a9b6 0e000409 00000000 00be5690 0effffff
004774c0 004774c0 00beaea0 337d69ac 0100ffa4 0046da26
ffffffff 004248ee 337d6f58 00d0fb10 00bef588 00beaea0
7c918f87 00beaea0 7ffd8000 00beaf30 00000014 00000001
00000000 00153330 00000000 00000000 00be5690 00000005
00000000 00000000 00000000 7ffd8000 71ab1273 000000d4
000000d0 00000000 0100fd0c 7c90ee18 7c918ed0 ffffffff
7c918e74 7c90e8c4 7c918dfa 0100fd30 00bef588 00beaea0
00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000
7ffdb000 00000000 00000000 00000000 00000000 00000000
0100fcb0 00000000 00000000 7c90ee00 7c918e00 ffffffff
7c918dfa 7c90d625 7c90eacf 0100fd30 00000001 00010017
00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 00000038
00000023 00000023 00d0fb10 00bef588 00beaea0 00000000
7c9105c8 004456c0 00d0fad0 7c810659 0000001b 00000200
0100fffc 00000023 00000000 00000000 00000000 00000000
00000000 00000000 00000000 00000000 00000000 b2dfdb60
00000216 804ff12f 00000002 00000008 89b25da8 80502909
00000000 89b25da8 89ffed0b 89b25da8 00b25da8 b2dfdb44
805022d2 89b25e18 89ffed02 00000000 ffdff538 80544b04
00000002 804fa162 89ab0ca0 89ab0ca0 89ffed00 b2dfdb74
baba868b 89ab0d04 00000000 00000000 b2dfdb88 b53b541a
89ab0d00 00000000 89ffe8b0 b2dfdbb0 ba4f1bcd 89ec3298
89ab0ca0 ba4f1bdc 89ffe8e0 89ffe8b0 00000000 00000003
89ec5bb0 b2dfdbc8 ba4f1d25 ba4f1d48 b2dfdbc8 00000000
b9762451 b2dfdbe4 b976995d b976fc00 89ec26e0 89ec26e0
8a04c130 8a04c580 b2dfdc0c ba4f1bcd 89eda528 89ec26e0
ba4f1bdc ffdff538 80544b04 89bcbd00 804fb05c 89bcbeec
89bcbd80 89bcbdb4 00000000 806418ac 89ecb938 89bcbd80
7ffdb000 b2dfdc88 80502462 00000000 00000005 00000000
00000000 00000000 804fedda b2dfdc60 89bcbdb4 804fee96
806e4427 89bcbd80 b2dfdd50 00000000 89bcbe68 ffdff501
00000000 89ecb938 80502442 00000000 337d6f24 00000000
0100ffdc 0046f46a 00000001 0100ffec 004456d4 7c80b683
00beaea0 00d0fb10 00bef588 00beaea0 7ffdb000 c0000005
0100ffc0 0100f550
System Activity:
----------------
Process 00000000: [System Process]
Module at 0x00400000: aawservice.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: CEAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x004a0000: PKArchive84cb.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x77c00000: VERSION.dll
Module at 0x771b0000: WININET.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x00340000: Update.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x769c0000: USERENV.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x71a50000: mswsock.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76fc0000: rasadhlp.dll
Process 00000004: System
Current Memory usage : 232 kb
Memory usage peak : 3768 kb
Current Paged Pool usage : 0 kb
Paged Pool usage peak : 0 kb
Current Non-Paged Pool usage : 0 kb
Non-Paged Pool usage peak : 0 kb
Current Page file usage : 0 kb
Page file usage peak : 0 kb
Page Faults : 7664
Module list
Module at 0x00000000:
Process 000001ec: smss.exe
Current Memory usage : 388 kb
Memory usage peak : 480 kb
Current Paged Pool usage : 6 kb
Paged Pool usage peak : 21 kb
Current Non-Paged Pool usage : 0 kb
Non-Paged Pool usage peak : 1 kb
Current Page file usage : 168 kb
Page file usage peak : 1676 kb
Page Faults : 213
Module list
Module at 0x48580000: smss.exe
Module at 0x7c900000: ntdll.dll
Process 0000023c: csrss.exe
Current Memory usage : 2768 kb
Memory usage peak : 3848 kb
Current Paged Pool usage : 47 kb
Paged Pool usage peak : 84 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 1348 kb
Page file usage peak : 3248 kb
Page Faults : 2544
Module list
Module at 0x4a680000: csrss.exe
Module at 0x7c900000: ntdll.dll
Module at 0x75b40000: CSRSRV.dll
Module at 0x75b50000: basesrv.dll
Module at 0x75b60000: winsrv.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7c800000: KERNEL32.dll
Module at 0x7e410000: USER32.dll
Module at 0x75e90000: sxs.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Process 00000258: winlogon.exe
Current Memory usage : 8740 kb
Memory usage peak : 9052 kb
Current Paged Pool usage : 72 kb
Paged Pool usage peak : 90 kb
Current Non-Paged Pool usage : 66 kb
Non-Paged Pool usage peak : 66 kb
Current Page file usage : 5924 kb
Page file usage peak : 6220 kb
Page Faults : 3190
Module list
Module at 0x01000000: winlogon.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x75940000: NDdeApi.dll
Module at 0x75930000: PROFMAP.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x76bc0000: REGAPI.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x77c00000: VERSION.dll
Module at 0x76360000: WINSTA.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x75970000: MSGINA.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5d090000: COMCTL32.dll
Module at 0x74320000: ODBC32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x773d0000: comctl32.dll
Module at 0x20000000: odbcint.dll
Module at 0x776e0000: SHSVCS.dll
Module at 0x76bb0000: sfc.dll
Module at 0x76c60000: sfc_os.dll
Module at 0x774e0000: ole32.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x723d0000: WINSCARD.DLL
Module at 0x76f50000: WTSAPI32.dll
Module at 0x75e90000: sxs.dll
Module at 0x5ad70000: uxtheme.dll
Module at 0x76b40000: WINMM.dll
Module at 0x10000000: Ati2evxx.dll
Module at 0x76600000: cscdll.dll
Module at 0x75950000: WlNotify.dll
Module at 0x73000000: WINSPOOL.DRV
Module at 0x71b20000: MPR.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x71bf0000: SAMLIB.dll
Process 00000284: services.exe
Current Memory usage : 3916 kb
Memory usage peak : 3932 kb
Current Paged Pool usage : 61 kb
Paged Pool usage peak : 66 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 1972 kb
Page file usage peak : 1972 kb
Page Faults : 1119
Module list
Module at 0x01000000: services.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x769c0000: USERENV.dll
Module at 0x758e0000: SCESRV.dll
Module at 0x776c0000: AUTHZ.dll
Module at 0x7dba0000: umpnpmgr.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x5f770000: NCObjAPI.DLL
Module at 0x76080000: MSVCP60.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77fe0000: secur32.dll
Module at 0x77b40000: Apphelp.dll
Module at 0x77b70000: eventlog.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x76f50000: wtsapi32.dll
Process 00000290: lsass.exe
Current Memory usage : 4824 kb
Memory usage peak : 4824 kb
Current Paged Pool usage : 66 kb
Paged Pool usage peak : 68 kb
Current Non-Paged Pool usage : 6 kb
Non-Paged Pool usage peak : 8 kb
Current Page file usage : 2184 kb
Page file usage peak : 2184 kb
Page Faults : 1330
Module list
Module at 0x01000000: lsass.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x75730000: LSASRV.dll
Module at 0x71b20000: MPR.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x767a0000: NTDSAPI.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x74440000: SAMSRV.dll
Module at 0x76790000: cryptdll.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x20000000: msprivs.dll
Module at 0x71cf0000: kerberos.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x744b0000: netlogon.dll
Module at 0x767c0000: w32time.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x767f0000: schannel.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x74380000: wdigest.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x77920000: setupapi.dll
Module at 0x74410000: scecli.dll
Process 00000338: ati2evxx.exe
Current Memory usage : 2144 kb
Memory usage peak : 2148 kb
Current Paged Pool usage : 32 kb
Paged Pool usage peak : 32 kb
Current Non-Paged Pool usage : 2 kb
Non-Paged Pool usage peak : 2 kb
Current Page file usage : 524 kb
Page file usage peak : 524 kb
Page Faults : 565
Module list
Module at 0x00400000: Ati2evxx.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x00bc0000: Ati2edxx.dll
Module at 0x5ad70000: uxtheme.dll
Process 00000348: svchost.exe
Current Memory usage : 2992 kb
Memory usage peak : 2992 kb
Current Paged Pool usage : 58 kb
Paged Pool usage peak : 63 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 1224 kb
Page file usage peak : 1224 kb
Page Faults : 790
Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x76a80000: rpcss.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x20000000: xpsp2res.dll
Process 00000384: svchost.exe
Current Memory usage : 3864 kb
Memory usage peak : 3864 kb
Current Paged Pool usage : 66 kb
Paged Pool usage peak : 66 kb
Current Non-Paged Pool usage : 13 kb
Non-Paged Pool usage peak : 15 kb
Current Page file usage : 1588 kb
Page file usage peak : 1604 kb
Page Faults : 1079
Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76a80000: rpcss.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76fc0000: rasadhlp.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Process 000003c8: svchost.exe
Current Memory usage : 6012 kb
Memory usage peak : 9368 kb
Current Paged Pool usage : 80 kb
Paged Pool usage peak : 87 kb
Current Non-Paged Pool usage : 9 kb
Non-Paged Pool usage peak : 10 kb
Current Page file usage : 5420 kb
Page file usage peak : 5420 kb
Page Faults : 2764
Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x776e0000: shsvcs.dll
Module at 0x76360000: WINSTA.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x76d80000: dhcpcsvc.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x77fe0000: Secur32.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Module at 0x7db10000: wzcsvc.dll
Module at 0x76e80000: rtutils.dll
Module at 0x76d30000: WMI.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76f50000: WTSAPI32.dll
Module at 0x606b0000: ESENT.dll
Module at 0x76b20000: ATL.DLL
Module at 0x0ffd0000: rsaenh.dll
Module at 0x76b70000: rastls.dll
Module at 0x754d0000: CRYPTUI.dll
Module at 0x76c30000: WINTRUST.dll
Module at 0x76c90000: IMAGEHLP.dll
Module at 0x771b0000: WININET.dll
Module at 0x76d40000: MPRAPI.dll
Module at 0x77cc0000: ACTIVEDS.dll
Module at 0x76e10000: adsldpc.dll
Module at 0x77920000: SETUPAPI.dll
Module at 0x76ee0000: RASAPI32.dll
Module at 0x76e90000: rasman.dll
Module at 0x76eb0000: TAPI32.dll
Module at 0x767f0000: SCHANNEL.dll
Module at 0x723d0000: WinSCard.dll
Module at 0x76bd0000: raschap.dll
Module at 0x77c70000: msv1_0.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Process 0000040c: svchost.exe
Current Memory usage : 3208 kb
Memory usage peak : 3208 kb
Current Paged Pool usage : 54 kb
Paged Pool usage peak : 63 kb
Current Non-Paged Pool usage : 4 kb
Non-Paged Pool usage peak : 6 kb
Current Page file usage : 1252 kb
Page file usage peak : 1252 kb
Page Faults : 855
Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x76770000: dnsrslvr.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x71a50000: mswsock.dll
Module at 0x662b0000: hnetcfg.dll
Module at 0x71a90000: wshtcpip.dll
Process 00000448: svchost.exe
Current Memory usage : 2928 kb
Memory usage peak : 2928 kb
Current Paged Pool usage : 58 kb
Paged Pool usage peak : 63 kb
Current Non-Paged Pool usage : 2 kb
Non-Paged Pool usage peak : 3 kb
Current Page file usage : 1100 kb
Page file usage peak : 1100 kb
Page Faults : 764
Module list
Module at 0x01000000: svchost.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x7e410000: USER32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x76b40000: WINMM.dll
Module at 0x774e0000: ole32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x77690000: NTMARTA.DLL
Module at 0x76f60000: WLDAP32.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x20000000: xpsp2res.dll
Module at 0x74c40000: lmhsvc.dll
Module at 0x76d60000: iphlpapi.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Process 00000490: logonui.exe
Current Memory usage : 3384 kb
Memory usage peak : 4800 kb
Current Paged Pool usage : 61 kb
Paged Pool usage peak : 68 kb
Current Non-Paged Pool usage : 5 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 2964 kb
Page file usage peak : 2964 kb
Page Faults : 2088
Module list
Module at 0x01000000: logonui.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x773d0000: COMCTL32.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x5b860000: NETAPI32.dll
Module at 0x774e0000: ole32.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x6c1b0000: DUSER.dll
Module at 0x76380000: MSIMG32.dll
Module at 0x74c80000: OLEACC.dll
Module at 0x76080000: MSVCP60.dll
Module at 0x5cb70000: ShimEng.dll
Module at 0x6f880000: AcGenral.DLL
Module at 0x76b40000: WINMM.dll
Module at 0x77be0000: MSACM32.dll
Module at 0x77c00000: VERSION.dll
Module at 0x769c0000: USERENV.dll
Module at 0x5ad70000: UxTheme.dll
Module at 0x76fd0000: CLBCATQ.DLL
Module at 0x77050000: COMRes.dll
Module at 0x73d70000: shgina.dll
Module at 0x76360000: WINSTA.dll
Module at 0x71bf0000: SAMLIB.dll
Module at 0x75970000: MSGINA.dll
Module at 0x74320000: ODBC32.dll
Module at 0x763b0000: comdlg32.dll
Module at 0x20000000: odbcint.dll
Module at 0x77fe0000: Secur32.dll
Process 000004a4: aawservice.exe
Current Memory usage : 31168 kb
Memory usage peak : 68000 kb
Current Paged Pool usage : 127 kb
Paged Pool usage peak : 135 kb
Current Non-Paged Pool usage : 3 kb
Non-Paged Pool usage peak : 5 kb
Current Page file usage : 29740 kb
Page file usage peak : 72396 kb
Page Faults : 32285
Module list
Module at 0x00400000: aawservice.exe
Module at 0x7c900000: ntdll.dll
Module at 0x7c800000: kernel32.dll
Module at 0x10000000: CEAPI.dll
Module at 0x77dd0000: ADVAPI32.dll
Module at 0x77e70000: RPCRT4.dll
Module at 0x004a0000: PKArchive84cb.dll
Module at 0x7c9c0000: SHELL32.dll
Module at 0x77f10000: GDI32.dll
Module at 0x7e410000: USER32.dll
Module at 0x77c10000: msvcrt.dll
Module at 0x77f60000: SHLWAPI.dll
Module at 0x774e0000: ole32.dll
Module at 0x77a80000: CRYPT32.dll
Module at 0x77b20000: MSASN1.dll
Module at 0x76f60000: WLDAP32.dll
Module at 0x76bf0000: PSAPI.DLL
Module at 0x77c00000: VERSION.dll
Module at 0x771b0000: WININET.dll
Module at 0x77120000: OLEAUT32.dll
Module at 0x00340000: Update.dll
Module at 0x71ad0000: WSOCK32.dll
Module at 0x71ab0000: WS2_32.dll
Module at 0x71aa0000: WS2HELP.dll
Module at 0x769c0000: USERENV.dll
Module at 0x773d0000: comctl32.dll
Module at 0x5d090000: comctl32.dll
Module at 0x0ffd0000: rsaenh.dll
Module at 0x71a50000: mswsock.dll
Module at 0x76f20000: DNSAPI.dll
Module at 0x76fb0000: winrnr.dll
Module at 0x76fc0000: rasadhlp.dll
Click to view attachment
Click to view attachment