Supprimer Ads by CloudScout Résolu/Fermé

Question

Bonjour, J'ai nettoyer 25 fois mon ordinateur avec Adwcleaner et a chaque fois je mes en quarantaine ce qu'il trouve donc je fais un nettoyage et redémarre mon pc comme indiqué mais j'ai toujours énormément de publicité, même ceux qui sont censé être nettoyé, plusieurs publicité dans une seul page et toujours les mêmes j'en est vraiment marre qu'a chaque clique j'ai une publicité qui s'ajoute aux autres et donc que forcément ma navigation sur internet et lente, et a chaque rescaan il me retrouve ce qui est dans ma quarantaine ma liste est très grande et j'ai beaucoup de double même x6.. j'ai l'impression que en gros il ne m'a rien nettoyé du tout pourtant je suis sous windows, je peux vous dire que je suis affecté par adware, toolbar et hijacker la total, Pourtant je fais attention a chaque téléchargement, si quelqu'un peux m'aider svp.



Configuration: Windows / Chrome 37.0.2062.124

Malekal_morte- · Answer

Salut,

Suis ce tutoriel FRST: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/
Cela va générer trois rapports FRST :
* FRST.txt
* Shortcut.txt
* Additionnal.txt

Envoie comme expliqué, ces trois rapports sur le site pjjoint et donne les trois liens pjjoint de ces rapports afin qu'ils puissent être consultés.

luc · Answer

Merci pour la réponse voici les liens demandé ( FRST - ADDITION - SHORTCUT )

http://pjjoint.malekal.com/files.php?id=20150105_q8l9w910t8

http://pjjoint.malekal.com/files.php?id=20150105_o15z13n7r1115

http://pjjoint.malekal.com/files.php?id=20150105_y1415z7u11o13

Malekal_morte- · Answer

Voici la correction à effectuer avec FRST. Tu peux t'inspirer de cette note explicative avec des captures d'écran pour t'aider: https://www.malekal.com/tutoriel-farbar-recovery-scan-tool-frst/#fix Ouvre le bloc-notes : Touche Windows + R, dans le champs executer, tape notepad et OK. Copie/colle dedans ce qui suit : FF Extension: No Name - C:\Users\Ricart\AppData\Roaming\Mozilla\Firefox\Profiles\fqyiu4wf.default\extensions\info@webtosave.com.xpi [Not Found] FF Extension: 2e17e2b2b8d44a678d7bfafa6cc9d1d0 - C:\Users\Ricart\AppData\Roaming\Mozilla\Firefox\Profiles\fqyiu4wf.default\Extensions\{2e17e2b2-b8d4-4a67-8d7b-fafa6cc9d1d0} [2014-12-04] FF Extension: Newtab - C:\Users\Ricart\AppData\Roaming\Mozilla\Firefox\Profiles\fqyiu4wf.default\Extensions\{54bdd585-b53d-481b-8bd6-996f0233152d}.xpi [2014-11-27] CHR StartupUrls: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1419418825&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579, hxxp://isearch.omiga-plus.com/?type=hp&ts=1419614473&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579, hxxp://isearch.omiga-plus.com/?type=hp&ts=1419618187&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579, hxxp://isearch.omiga-plus.com/?type=hp&ts=1419867355&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579, hxxp://isearch.omiga-plus.com/?type=hp&ts=1420427452&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579, hxxp://isearch.omiga-plus.com/?type=hppp&ts=1420427466&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579, hxxp://isearch.omiga-plus.com/?type=hp&ts=1420461816&from=ill&uid=WDCXWD10JPVX-22JC3T0_WD-WX51AC3W4579W4579 [Pays US - 50.22.218.160] CHR DefaultSearchKeyword: Default -> omiga-plus R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158864 2014-12-29] (XTab system) R2 AVeGWan; C:\ProgramData sDjJudJC\AVeGWan.exe [2726256 2014-12-18] (Acute Angle Solutions Ltd) R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [473088 2015-01-05] (Fuyu LIMITED) [File not signed] S2 0c632643; C:\Windows\system32 undll32.exe c:\progra~3\intere~1\InterenetOptimizerSvc.dll,service 2015-01-05 13:44 - 2015-01-05 13:44 - 00000000 ____D () C:\ProgramData\IHProtectUpDate 2015-01-05 13:43 - 2015-01-05 13:43 - 00000000 ____D () C:\Users\Ricart\AppData\Roaming\omiga-plus 2015-01-05 13:43 - 2015-01-05 13:43 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect 2015-01-05 04:11 - 2015-01-05 13:44 - 00000000 ____D () C:\Program Files (x86)\XTab 2014-12-31 15:39 - 2014-12-31 15:39 - 00003282 _____ () C:\Windows\System32\Tasks\7sHMTehimNvCyZ8 2014-12-31 15:39 - 2014-12-31 15:39 - 00003242 _____ () C:\Windows\System32\Tasks\OI6kG7Hxu7yBc6P 2014-12-31 15:39 - 2014-12-31 15:39 - 00000000 ____D () C:\Users\Ricart\AppData\Roaming\ss6A5on 2014-12-31 15:39 - 2014-12-31 15:39 - 00000000 ____D () C:\Users\Ricart\AppData\Roaming\6YY1ndk 2014-12-21 13:04 - 2014-12-02 11:53 - 00000000 ____D () C:\ProgramData\600440862 2014-12-20 15:45 - 2014-07-16 14:23 - 00000000 ____D () C:\Users\Ricart\AppData\Local\Pokki 2014-12-13 13:34 - 2014-10-07 19:42 - 00003172 _____ () C:\Windows\System32\Tasks\SimpleFiles Installer Starter Task: {254B8FF1-4E0D-4AA7-9D57-9DD30F74D63B} - System32\Tasks\WIN-GGfIfEGCfEGbGffIfCfEGC => C:\Users\Ricart\AppData\Roaming\~xqmljyw.exe Task: {3E300A28-9313-46C9-9E34-0D058E157D27} - System32\Tasks\{FF186B60-21C2-408C-BF9A-A049BA27DF24} => pcalua.exe -a C:\Users\Ricart\AppData\Roaming\istartsurf\UninstallManager.exe -c -ptid=smt Task: {59E8E327-3051-45B6-8E19-27F1C797C858} - System32\Tasks\SimpleFiles Installer Starter => C:\Users\Ricart\AppData\Local\Temp\SimpleFilesST0Pl3rgvv.exe <==== ATTENTION Task: {5EA6074A-C59A-4A69-A22D-DE416E4AA4C3} - System32\Tasks\ubDdLmvTBQIaLIZ => C:\Users\Ricart\AppData\Roaming\2onXWJL\glYKUad.exe [2014-12-01] ( ) Task: {669428A7-7B4B-453C-9AD1-7B06C3206B4D} - System32\Tasks\OI6kG7Hxu7yBc6P => C:\Users\Ricart\AppData\Roaming\ss6A5on\4tayGax.exe [2014-12-31] ( ) Task: {96981BBC-CE1A-4EDD-8547-D625D8765B63} - System32\Tasks\DolbySelectorTask => C:\Program Files\Dolby Digital Plus\ddp.exe [2013-09-09] (Dolby Laboratories Inc.) Task: {9F994FC2-B6B3-4ED3-BAEC-6ABAEF82F4BA} - System32\Tasks\7sHMTehimNvCyZ8 => C:\Users\Ricart\AppData\Roaming\6YY1ndk rBCWp7.exe [2014-12-31] ( ) Task: {AE684415-449B-4F2F-9E5E-3089283CE5B5} - System32\Tasks\WIN-statsSystem => C:\Users\Ricart\AppData\Local\Microsoft\WinU\~vdtounh.exe [2014-07-28] () Task: {BFD9D1BA-3DF1-4E03-AF2F-5E12C5F561C6} - System32\Tasks\WIN-fIGbfFfEGCfFGEGbfCfE => C:\Users\Ricart\AppData\Roaming\~strtjcu.exe Task: {C38610EB-CFF6-4C91-8624-C3F1BFA7A728} - System32\Tasks\{A309DF13-6248-4DB0-BCB9-595E7BF11023} => pcalua.exe -a C:\ProgramData\SafeWeb\uninstall.exe -c /kb=y /ic=1 Task: {D4D3D529-674F-4649-9532-0B35B55AC074} - System32\Tasks\Total Privacy Protector Schedule => C:\Program Files (x86)\Total Privacy Protector\TPPSchedule.exe [2014-09-08] (Softitube Ltd) Task: {F4675BC4-5C34-4386-BB3F-EAE79341F17E} - System32\Tasks\WIN-statsAdmin => C:\Users\Ricart\AppData\Local\Microsoft\WinU\~anndija.exe [2014-08-06] () <==== ATTENTION C:\Users\Ricart\AppData\Local\Microsoft\WinU\ Une fois, le texte coller dans le bloc-note. Menu Fichier puis Enregistrer sous. A gauche, place toi sur le bureau. Dans le champs en bas, nom du fichier mets : fixlist.txt Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau. Relance FRST et clic sur le bouton Fix Selon comment un redémarrage est nécessaire (pas obligatoire). Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message. Redémarre l'ordinateur Réinitialise les navigateurs WEB : * Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start= * Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start= puis : Supprime les PUM.DNS avec RogueKiller en suivant ce tutorial : https://forum.malekal.com/viewtopic.php?t=48312&start= Donne le rapport de suppression de RogueKiller.

luc · Answer

Lien du fichier texte après le clic sur fix :

http://pjjoint.malekal.com/files.php?id=20150105_d10y5r13h7e14

Je continue la procédure des réinitialisations mais la réinitialisation supprime tel les favoris ?.

luc · Answer

Merci pour votre aide mais .. je commence a perdre éspoire.

J'ai suivi toutes les étapes jusqu'à la fin sans rencontrer de problème et j'ai toujours autant de pub, Surtout CloudScout et Powered By et Omiga-plus que je rencontre énormément

Pourtant j'ai copié/collé le texte dans un document mon ordinateur ses redémarré après le clic sur fix j'ai Réinitialisé chrome et Supprimé les PUM.DNS que faire ?

Malekal_morte- · Answer

ok :)

Voila, c'est terminé, tu peux supprimer les programmes utilisés.

Quelques conseils :


Installe Malwarebyte's Anti-Malware : https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
Fais des scans réguliers avec, il est efficace.
(sauf si tu es sur un netbook)

Pour prévenir les sites malicieux, tu peux installer Blockulicious : https://forum.malekal.com/viewtopic.php?t=46656&start=


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Amande · Answer

Bonjour,

J'ai le même problème qui est posé, j'ai lancé le logiciel FRST et ai les 3 rapports à dispo si quelqu'un veut bien m'aider... s'iou plait..... suis tellement désespérée par ces pubs "Ads by CloudScout" et autres onglets qui s'ouvrent sans que je n'ai rien demandé, surtout avec certains sites internet pas tous ....
Merci d'avance !!!!!!!!

jadri87 · Answer

Bonjour les surdoués du PC!

Mêmes soucis qu'au dessus... J'ai suivi les étapes et donc ci-dessous les liens
pour que quelqu'un puisse m'aider. Il y a un mot de passe donc me le demander.

MERCI BEAUCOUP

https://pjjoint.malekal.com/files.php?id=20150118_g8c11r5c7e14
https://pjjoint.malekal.com/files.php?id=20150118_k12d6g6v12o14
https://pjjoint.malekal.com/files.php?id=FRST_20150118_p11e12f12i14f10

jadri87 · Answer

Voici le fichier texte. Il y a toujours les mêmes problèmes.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-01-2015 01
Ran by Jannault at 2015-01-19 20:40:46 Run:1
Running from C:\Users\Jannault\Desktop
Loaded Profiles: Jannault (Available profiles: Jannault)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path 
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - No Path 
S1 wpnfd_1_10_0_6; system32\drivers\wpnfd_1_10_0_6.sys [X] 
2014-09-01 09:18 - 2014-09-01 09:18 - 0001248 _____ () C:\Users\Jannault\AppData\Roaming\MZHHFUHD 
2014-09-01 09:18 - 2014-09-01 09:18 - 0002086 _____ () C:\Users\Jannault\AppData\Roaming\VQRX 
R2 fmIhJmhHI; C:\ProgramData\iovxnkCr\fmIhJmhHI.exe [2726256 2015-01-11] (Small Island Development) 
C:\ProgramData\iovxnkCr 
*****************

"HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => Key deleted successfully.
wpnfd_1_10_0_6 => Service deleted successfully.
C:\Users\Jannault\AppData\Roaming\MZHHFUHD => Moved successfully.
C:\Users\Jannault\AppData\Roaming\VQRX => Moved successfully.
fmIhJmhHI => Unable to stop service
fmIhJmhHI => Service deleted successfully.

"C:\ProgramData\iovxnkCr" directory move:

Could not move "C:\ProgramData\iovxnkCr\fmIhJmhHI.dat" => Scheduled to move on reboot.
C:\ProgramData\iovxnkCr\fmIhJmhHI.exe => Moved successfully.
C:\ProgramData\iovxnkCr\fmIhJmhHI.exe.config => Moved successfully.
Could not move "C:\ProgramData\iovxnkCr\info.dat" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr\dat\PEGNAr.dll" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr\dat\sOsDZy.dll" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr\dat\VIuQhb.exe" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr\dat\VIuQhb.exe.config" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr\dat\wNvfCGOsVj.exe" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr\dat\wNvfCGOsVj.exe.config" => Scheduled to move on reboot.
Could not move "C:\ProgramData\iovxnkCr" directory. => Scheduled to move on reboot.


=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2015-01-19 20:43:07)<=

C:\ProgramData\iovxnkCr\fmIhJmhHI.dat => Is moved successfully.
C:\ProgramData\iovxnkCr\info.dat => Is moved successfully.
C:\ProgramData\iovxnkCr\dat\PEGNAr.dll => Is moved successfully.
C:\ProgramData\iovxnkCr\dat\sOsDZy.dll => Is moved successfully.
C:\ProgramData\iovxnkCr\dat\VIuQhb.exe => Is moved successfully.
C:\ProgramData\iovxnkCr\dat\VIuQhb.exe.config => Is moved successfully.
C:\ProgramData\iovxnkCr\dat\wNvfCGOsVj.exe => Is moved successfully.
C:\ProgramData\iovxnkCr\dat\wNvfCGOsVj.exe.config => Is moved successfully.
C:\ProgramData\iovxnkCr => Is moved successfully.

==== End of Fixlog 20:43:07 ====

Malekal_morte- · Answer

Supprime les PUM.DNS avec RogueKiller en suivant ce tutorial : https://forum.malekal.com/viewtopic.php?t=48312&start=
Donne le rapport de suppression de RogueKiller.

jadri87 · Answer

Voila le rapport.

RogueKiller V10.2.0.0 (x64) [Jan 19 2015] par Adlice Software
email : https://www.adlice.com/contact/
Remontées : https://forum.adlice.com/
Site web : https://www.adlice.com/fr/roguekiller/
Blog : https://www.adlice.com/

Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Démarré en  : Mode normal
Utilisateur : Jannault [Administrateur]
Mode : Suppression -- Date : 01/19/2015  22:44:41

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 14 ¤¤¤
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\serversu (C:\Users\Jannault\AppData\Roaming\SoftwareUpdater\SUsrv.exe) -> Non sélectionné
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\serversu (C:\Users\Jannault\AppData\Roaming\SoftwareUpdater\SUsrv.exe) -> Non sélectionné
[Suspicious.Path] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\serversu (C:\Users\Jannault\AppData\Roaming\SoftwareUpdater\SUsrv.exe) -> Non sélectionné
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{02BE19C4-9E14-4583-9D48-FF43EDBAFAC8} | NameServer : 31.168.224.100,5.135.12.56 [(Unknown Country?) (XX)][(Unknown Country?) (XX)]  -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{02BE19C4-9E14-4583-9D48-FF43EDBAFAC8} | NameServer : 31.168.224.100,5.135.12.56 [(Unknown Country?) (XX)][(Unknown Country?) (XX)]  -> Remplacé(e) ()
[PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Tcpip\Parameters\Interfaces\{02BE19C4-9E14-4583-9D48-FF43EDBAFAC8} | NameServer : 31.168.224.100,5.135.12.56 [(Unknown Country?) (XX)][(Unknown Country?) (XX)]  -> Remplacé(e) ()
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1192421324-2444216565-626012361-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1192421324-2444216565-626012361-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X64) HKEY_USERS\S-1-5-21-1192421324-2444216565-626012361-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Non sélectionné
[PUM.DesktopIcons] (X86) HKEY_USERS\S-1-5-21-1192421324-2444216565-626012361-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1  -> Non sélectionné

¤¤¤ Tâches : 4 ¤¤¤
[Suspicious.Path] MZHHFUHD.job -- C:\Users\Jannault\AppData\Roaming\MZHHFUHD.exe (/infocmdline=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) -> Supprimé(e)
[Suspicious.Path] VQRX.job -- C:\Users\Jannault\AppData\Roaming\VQRX.exe (/infocmdline=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) -> Supprimé(e)
[Suspicious.Path] \MZHHFUHD -- C:\Users\Jannault\AppData\Roaming\MZHHFUHD.exe (/infocmdline=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) -> Supprimé(e)
[Suspicious.Path] \VQRX -- C:\Users\Jannault\AppData\Roaming\VQRX.exe (/infocmdline=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) -> Supprimé(e)

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 ¤¤¤

¤¤¤ Antirootkit : 206 (Driver: Chargé) ¤¤¤
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x77b9010a (jmp 0x15d850|jmp 0xfffffffffffffe09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x77b9010a (jmp 0x15ed60|jmp 0xfffffffffffffc49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x77b9010a (jmp 0x15ed20|jmp 0xfffffffffffffc69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateEvent : Unknown @ 0x77b9010a (jmp 0x15eba0|jmp 0xfffffffffffffd29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtNotifyChangeKey : Unknown @ 0x77b9010a (jmp 0x15e300|jmp 0xfffffffffffffb69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x77b9010a (jmp 0x15ee70|jmp 0xfffffffffffffc19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenEvent : Unknown @ 0x77b9010a (jmp 0x15ec30|jmp 0xfffffffffffffd19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtAssignProcessToJobObject : Unknown @ 0x77b9010a (jmp 0x15e870|jmp 0xfffffffffffffc59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x77b9010a (jmp 0x15dc20|jmp 0xfffffffffffffbf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateSection : Unknown @ 0x77b9010a (jmp 0x15ebc0|jmp 0xfffffffffffffce9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x77b9010a (jmp 0x15ee60|jmp 0xfffffffffffffc89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtNotifyChangeMultipleKeys : Unknown @ 0x77b9010a (jmp 0x15e300|jmp 0xfffffffffffffb59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtQueryObject : Unknown @ 0x77b9010a (jmp 0x15f0a0|jmp 0xfffffffffffffba9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateIoCompletion : Unknown @ 0x77b9010a (jmp 0x15e730|jmp 0xfffffffffffffca9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenSection : Unknown @ 0x77b9010a (jmp 0x15ed00|jmp 0xfffffffffffffcd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateSemaphore : Unknown @ 0x77b9010a (jmp 0x15e5a0|jmp 0xfffffffffffffd49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenSemaphore : Unknown @ 0x77b9010a (jmp 0x15e030|jmp 0xfffffffffffffd39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateMutant : Unknown @ 0x77b9010a (jmp 0x15e610|jmp 0xfffffffffffffd69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenMutant : Unknown @ 0x77b9010a (jmp 0x15e060|jmp 0xfffffffffffffd59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateTimer : Unknown @ 0x77b9010a (jmp 0x15e5f0|jmp 0xfffffffffffffcc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenTimer : Unknown @ 0x77b9010a (jmp 0x15e070|jmp 0xfffffffffffffcb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x77b9010a (jmp 0x15e6a0|jmp 0xfffffffffffffc29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtTerminateThread : Unknown @ 0x77b9010a (jmp 0x15ec10|jmp 0xfffffffffffffc09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenThread : Unknown @ 0x77b9010a (jmp 0x15e0c0|jmp 0xfffffffffffffc79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x77b9010a (jmp 0x15d9a0|jmp 0xfffffffffffffbc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtAlpcSendWaitReceivePort : Unknown @ 0x77b9010a (jmp 0x15e980|jmp 0xfffffffffffffb79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtQueueApcThreadEx : Unknown @ 0x77b9010a (jmp 0x15de80|jmp 0xfffffffffffffbb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtVdmControl : Unknown @ 0x77b9010a (jmp 0x15d700|jmp 0xfffffffffffffd79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtOpenEventPair : Unknown @ 0x77b9010a (jmp 0x15e130|jmp 0xfffffffffffffcf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (explorer.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x77b9010a (jmp 0x15e140|jmp 0xfffffffffffffe19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSection : Unknown @ 0x1a010a (jmp 0xffffffff8876ebc0|jmp 0xfffffffffffffce9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateThread : Unknown @ 0x1a010a (jmp 0xffffffff8876ec10|jmp 0xfffffffffffffc09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryObject : Unknown @ 0x1a010a (jmp 0xffffffff8876f0a0|jmp 0xfffffffffffffba9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x1a010a (jmp 0xffffffff8876ee60|jmp 0xfffffffffffffc89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenThread : Unknown @ 0x1a010a (jmp 0xffffffff8876e0c0|jmp 0xfffffffffffffc79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x1a010a (jmp 0xffffffff8876ed60|jmp 0xfffffffffffffc49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x1a010a (jmp 0xffffffff8876ee70|jmp 0xfffffffffffffc19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x1a010a (jmp 0xffffffff8876e6a0|jmp 0xfffffffffffffc29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThread : Unknown @ 0x1a010a (jmp 0xffffffff8876ec30|jmp 0xfffffffffffffc39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x1a010a (jmp 0xffffffff8876d9a0|jmp 0xfffffffffffffbc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x1a010a (jmp 0xffffffff8876dc20|jmp 0xfffffffffffffbf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootOptions : Unknown @ 0x1a010a (jmp 0xffffffff8876daa0|jmp 0xfffffffffffffd89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenTimer : Unknown @ 0x1a010a (jmp 0xffffffff8876e070|jmp 0xfffffffffffffcb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeMultipleKeys : Unknown @ 0x1a010a (jmp 0xffffffff8876e300|jmp 0xfffffffffffffb59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendProcess : Unknown @ 0x1a010a (jmp 0xffffffff8876d9a0|jmp 0xfffffffffffffbd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateTimer : Unknown @ 0x1a010a (jmp 0xffffffff8876e5f0|jmp 0xfffffffffffffcc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x1a010a (jmp 0xffffffff8876d850|jmp 0xfffffffffffffe09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateIoCompletion : Unknown @ 0x1a010a (jmp 0xffffffff8876e730|jmp 0xfffffffffffffca9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtModifyBootEntry : Unknown @ 0x1a010a (jmp 0xffffffff8876e0f0|jmp 0xfffffffffffffda9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenMutant : Unknown @ 0x1a010a (jmp 0xffffffff8876e060|jmp 0xfffffffffffffd59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemPowerState : Unknown @ 0x1a010a (jmp 0xffffffff8876d860|jmp 0xfffffffffffffde9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePortEx : Unknown @ 0x1a010a (jmp 0xffffffff8876ef10|jmp 0xfffffffffffffb89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtShutdownSystem : Unknown @ 0x1a010a (jmp 0xffffffff8876d7e0|jmp 0xfffffffffffffdf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenIoCompletion : Unknown @ 0x1a010a (jmp 0xffffffff8876e180|jmp 0xfffffffffffffc99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAddBootEntry : Unknown @ 0x1a010a (jmp 0xffffffff8876e8f0|jmp 0xfffffffffffffdc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePort : Unknown @ 0x1a010a (jmp 0xffffffff8876f100|jmp 0xfffffffffffffb99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDeleteBootEntry : Unknown @ 0x1a010a (jmp 0xffffffff8876e460|jmp 0xfffffffffffffdb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootEntryOrder : Unknown @ 0x1a010a (jmp 0xffffffff8876daa0|jmp 0xfffffffffffffd99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSection : Unknown @ 0x1a010a (jmp 0xffffffff8876ed00|jmp 0xfffffffffffffcd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDebugActiveProcess : Unknown @ 0x1a010a (jmp 0xffffffff8876e660|jmp 0xfffffffffffffbe9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAssignProcessToJobObject : Unknown @ 0x1a010a (jmp 0xffffffff8876e870|jmp 0xfffffffffffffc59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEvent : Unknown @ 0x1a010a (jmp 0xffffffff8876ec30|jmp 0xfffffffffffffd19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAlpcSendWaitReceivePort : Unknown @ 0x1a010a (jmp 0xffffffff8876e980|jmp 0xfffffffffffffb79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeKey : Unknown @ 0x1a010a (jmp 0xffffffff8876e300|jmp 0xfffffffffffffb69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEventPair : Unknown @ 0x1a010a (jmp 0xffffffff8876e130|jmp 0xfffffffffffffcf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEvent : Unknown @ 0x1a010a (jmp 0xffffffff8876eba0|jmp 0xfffffffffffffd29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSemaphore : Unknown @ 0x1a010a (jmp 0xffffffff8876e5a0|jmp 0xfffffffffffffd49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSystemDebugControl : Unknown @ 0x1a010a (jmp 0xffffffff8876d780|jmp 0xfffffffffffffdd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateMutant : Unknown @ 0x1a010a (jmp 0xffffffff8876e610|jmp 0xfffffffffffffd69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x1a010a (jmp 0xffffffff8876e140|jmp 0xfffffffffffffe19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEventPair : Unknown @ 0x1a010a (jmp 0xffffffff8876e6e0|jmp 0xfffffffffffffd09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThreadEx : Unknown @ 0x1a010a (jmp 0xffffffff8876de80|jmp 0xfffffffffffffbb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x1a010a (jmp 0xffffffff8876ed20|jmp 0xfffffffffffffc69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSemaphore : Unknown @ 0x1a010a (jmp 0xffffffff8876e030|jmp 0xfffffffffffffd39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSection : Unknown @ 0x77b9010a (jmp 0x15ebc0|jmp 0xfffffffffffffce9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateThread : Unknown @ 0x77b9010a (jmp 0x15ec10|jmp 0xfffffffffffffc09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryObject : Unknown @ 0x77b9010a (jmp 0x15f0a0|jmp 0xfffffffffffffba9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x77b9010a (jmp 0x15ee60|jmp 0xfffffffffffffc89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenThread : Unknown @ 0x77b9010a (jmp 0x15e0c0|jmp 0xfffffffffffffc79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x77b9010a (jmp 0x15ed60|jmp 0xfffffffffffffc49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x77b9010a (jmp 0x15ee70|jmp 0xfffffffffffffc19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x77b9010a (jmp 0x15e6a0|jmp 0xfffffffffffffc29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThread : Unknown @ 0x77b9010a (jmp 0x15ec30|jmp 0xfffffffffffffc39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x77b9010a (jmp 0x15d9a0|jmp 0xfffffffffffffbc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x77b9010a (jmp 0x15dc20|jmp 0xfffffffffffffbf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootOptions : Unknown @ 0x77b9010a (jmp 0x15daa0|jmp 0xfffffffffffffd89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenTimer : Unknown @ 0x77b9010a (jmp 0x15e070|jmp 0xfffffffffffffcb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeMultipleKeys : Unknown @ 0x77b9010a (jmp 0x15e300|jmp 0xfffffffffffffb59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendProcess : Unknown @ 0x77b9010a (jmp 0x15d9a0|jmp 0xfffffffffffffbd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateTimer : Unknown @ 0x77b9010a (jmp 0x15e5f0|jmp 0xfffffffffffffcc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x77b9010a (jmp 0x15d850|jmp 0xfffffffffffffe09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateIoCompletion : Unknown @ 0x77b9010a (jmp 0x15e730|jmp 0xfffffffffffffca9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtModifyBootEntry : Unknown @ 0x77b9010a (jmp 0x15e0f0|jmp 0xfffffffffffffda9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenMutant : Unknown @ 0x77b9010a (jmp 0x15e060|jmp 0xfffffffffffffd59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemPowerState : Unknown @ 0x77b9010a (jmp 0x15d860|jmp 0xfffffffffffffde9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePortEx : Unknown @ 0x77b9010a (jmp 0x15ef10|jmp 0xfffffffffffffb89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtShutdownSystem : Unknown @ 0x77b9010a (jmp 0x15d7e0|jmp 0xfffffffffffffdf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenIoCompletion : Unknown @ 0x77b9010a (jmp 0x15e180|jmp 0xfffffffffffffc99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAddBootEntry : Unknown @ 0x77b9010a (jmp 0x15e8f0|jmp 0xfffffffffffffdc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePort : Unknown @ 0x77b9010a (jmp 0x15f100|jmp 0xfffffffffffffb99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDeleteBootEntry : Unknown @ 0x77b9010a (jmp 0x15e460|jmp 0xfffffffffffffdb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootEntryOrder : Unknown @ 0x77b9010a (jmp 0x15daa0|jmp 0xfffffffffffffd99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSection : Unknown @ 0x77b9010a (jmp 0x15ed00|jmp 0xfffffffffffffcd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDebugActiveProcess : Unknown @ 0x77b9010a (jmp 0x15e660|jmp 0xfffffffffffffbe9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAssignProcessToJobObject : Unknown @ 0x77b9010a (jmp 0x15e870|jmp 0xfffffffffffffc59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEvent : Unknown @ 0x77b9010a (jmp 0x15ec30|jmp 0xfffffffffffffd19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAlpcSendWaitReceivePort : Unknown @ 0x77b9010a (jmp 0x15e980|jmp 0xfffffffffffffb79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeKey : Unknown @ 0x77b9010a (jmp 0x15e300|jmp 0xfffffffffffffb69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEventPair : Unknown @ 0x77b9010a (jmp 0x15e130|jmp 0xfffffffffffffcf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEvent : Unknown @ 0x77b9010a (jmp 0x15eba0|jmp 0xfffffffffffffd29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSemaphore : Unknown @ 0x77b9010a (jmp 0x15e5a0|jmp 0xfffffffffffffd49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSystemDebugControl : Unknown @ 0x77b9010a (jmp 0x15d780|jmp 0xfffffffffffffdd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateMutant : Unknown @ 0x77b9010a (jmp 0x15e610|jmp 0xfffffffffffffd69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x77b9010a (jmp 0x15e140|jmp 0xfffffffffffffe19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEventPair : Unknown @ 0x77b9010a (jmp 0x15e6e0|jmp 0xfffffffffffffd09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThreadEx : Unknown @ 0x77b9010a (jmp 0x15de80|jmp 0xfffffffffffffbb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x77b9010a (jmp 0x15ed20|jmp 0xfffffffffffffc69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSemaphore : Unknown @ 0x77b9010a (jmp 0x15e030|jmp 0xfffffffffffffd39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSection : Unknown @ 0xc4010a (jmp 0xffffffff8920ebc0|jmp 0xfffffffffffffce9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateThread : Unknown @ 0xc4010a (jmp 0xffffffff8920ec10|jmp 0xfffffffffffffc09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryObject : Unknown @ 0xc4010a (jmp 0xffffffff8920f0a0|jmp 0xfffffffffffffba9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0xc4010a (jmp 0xffffffff8920ee60|jmp 0xfffffffffffffc89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenThread : Unknown @ 0xc4010a (jmp 0xffffffff8920e0c0|jmp 0xfffffffffffffc79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0xc4010a (jmp 0xffffffff8920ed60|jmp 0xfffffffffffffc49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0xc4010a (jmp 0xffffffff8920ee70|jmp 0xfffffffffffffc19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0xc4010a (jmp 0xffffffff8920e6a0|jmp 0xfffffffffffffc29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThread : Unknown @ 0xc4010a (jmp 0xffffffff8920ec30|jmp 0xfffffffffffffc39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0xc4010a (jmp 0xffffffff8920d9a0|jmp 0xfffffffffffffbc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0xc4010a (jmp 0xffffffff8920dc20|jmp 0xfffffffffffffbf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootOptions : Unknown @ 0xc4010a (jmp 0xffffffff8920daa0|jmp 0xfffffffffffffd89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenTimer : Unknown @ 0xc4010a (jmp 0xffffffff8920e070|jmp 0xfffffffffffffcb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeMultipleKeys : Unknown @ 0xc4010a (jmp 0xffffffff8920e300|jmp 0xfffffffffffffb59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendProcess : Unknown @ 0xc4010a (jmp 0xffffffff8920d9a0|jmp 0xfffffffffffffbd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateTimer : Unknown @ 0xc4010a (jmp 0xffffffff8920e5f0|jmp 0xfffffffffffffcc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0xc4010a (jmp 0xffffffff8920d850|jmp 0xfffffffffffffe09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateIoCompletion : Unknown @ 0xc4010a (jmp 0xffffffff8920e730|jmp 0xfffffffffffffca9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtModifyBootEntry : Unknown @ 0xc4010a (jmp 0xffffffff8920e0f0|jmp 0xfffffffffffffda9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenMutant : Unknown @ 0xc4010a (jmp 0xffffffff8920e060|jmp 0xfffffffffffffd59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemPowerState : Unknown @ 0xc4010a (jmp 0xffffffff8920d860|jmp 0xfffffffffffffde9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePortEx : Unknown @ 0xc4010a (jmp 0xffffffff8920ef10|jmp 0xfffffffffffffb89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtShutdownSystem : Unknown @ 0xc4010a (jmp 0xffffffff8920d7e0|jmp 0xfffffffffffffdf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenIoCompletion : Unknown @ 0xc4010a (jmp 0xffffffff8920e180|jmp 0xfffffffffffffc99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAddBootEntry : Unknown @ 0xc4010a (jmp 0xffffffff8920e8f0|jmp 0xfffffffffffffdc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePort : Unknown @ 0xc4010a (jmp 0xffffffff8920f100|jmp 0xfffffffffffffb99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDeleteBootEntry : Unknown @ 0xc4010a (jmp 0xffffffff8920e460|jmp 0xfffffffffffffdb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootEntryOrder : Unknown @ 0xc4010a (jmp 0xffffffff8920daa0|jmp 0xfffffffffffffd99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSection : Unknown @ 0xc4010a (jmp 0xffffffff8920ed00|jmp 0xfffffffffffffcd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDebugActiveProcess : Unknown @ 0xc4010a (jmp 0xffffffff8920e660|jmp 0xfffffffffffffbe9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAssignProcessToJobObject : Unknown @ 0xc4010a (jmp 0xffffffff8920e870|jmp 0xfffffffffffffc59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEvent : Unknown @ 0xc4010a (jmp 0xffffffff8920ec30|jmp 0xfffffffffffffd19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAlpcSendWaitReceivePort : Unknown @ 0xc4010a (jmp 0xffffffff8920e980|jmp 0xfffffffffffffb79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeKey : Unknown @ 0xc4010a (jmp 0xffffffff8920e300|jmp 0xfffffffffffffb69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEventPair : Unknown @ 0xc4010a (jmp 0xffffffff8920e130|jmp 0xfffffffffffffcf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEvent : Unknown @ 0xc4010a (jmp 0xffffffff8920eba0|jmp 0xfffffffffffffd29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSemaphore : Unknown @ 0xc4010a (jmp 0xffffffff8920e5a0|jmp 0xfffffffffffffd49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSystemDebugControl : Unknown @ 0xc4010a (jmp 0xffffffff8920d780|jmp 0xfffffffffffffdd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateMutant : Unknown @ 0xc4010a (jmp 0xffffffff8920e610|jmp 0xfffffffffffffd69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0xc4010a (jmp 0xffffffff8920e140|jmp 0xfffffffffffffe19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEventPair : Unknown @ 0xc4010a (jmp 0xffffffff8920e6e0|jmp 0xfffffffffffffd09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThreadEx : Unknown @ 0xc4010a (jmp 0xffffffff8920de80|jmp 0xfffffffffffffbb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0xc4010a (jmp 0xffffffff8920ed20|jmp 0xfffffffffffffc69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSemaphore : Unknown @ 0xc4010a (jmp 0xffffffff8920e030|jmp 0xfffffffffffffd39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSection : Unknown @ 0x26010a (jmp 0xffffffff8882ebc0|jmp 0xfffffffffffffce9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateThread : Unknown @ 0x26010a (jmp 0xffffffff8882ec10|jmp 0xfffffffffffffc09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueryObject : Unknown @ 0x26010a (jmp 0xffffffff8882f0a0|jmp 0xfffffffffffffba9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenProcess : Unknown @ 0x26010a (jmp 0xffffffff8882ee60|jmp 0xfffffffffffffc89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenThread : Unknown @ 0x26010a (jmp 0xffffffff8882e0c0|jmp 0xfffffffffffffc79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtWriteVirtualMemory : Unknown @ 0x26010a (jmp 0xffffffff8882ed60|jmp 0xfffffffffffffc49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtTerminateProcess : Unknown @ 0x26010a (jmp 0xffffffff8882ee70|jmp 0xfffffffffffffc19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThreadEx : Unknown @ 0x26010a (jmp 0xffffffff8882e6a0|jmp 0xfffffffffffffc29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateThread : Unknown @ 0x26010a (jmp 0xffffffff8882ec30|jmp 0xfffffffffffffc39|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendThread : Unknown @ 0x26010a (jmp 0xffffffff8882d9a0|jmp 0xfffffffffffffbc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetContextThread : Unknown @ 0x26010a (jmp 0xffffffff8882dc20|jmp 0xfffffffffffffbf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootOptions : Unknown @ 0x26010a (jmp 0xffffffff8882daa0|jmp 0xfffffffffffffd89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenTimer : Unknown @ 0x26010a (jmp 0xffffffff8882e070|jmp 0xfffffffffffffcb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeMultipleKeys : Unknown @ 0x26010a (jmp 0xffffffff8882e300|jmp 0xfffffffffffffb59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSuspendProcess : Unknown @ 0x26010a (jmp 0xffffffff8882d9a0|jmp 0xfffffffffffffbd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateTimer : Unknown @ 0x26010a (jmp 0xffffffff8882e5f0|jmp 0xfffffffffffffcc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemInformation : Unknown @ 0x26010a (jmp 0xffffffff8882d850|jmp 0xfffffffffffffe09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateIoCompletion : Unknown @ 0x26010a (jmp 0xffffffff8882e730|jmp 0xfffffffffffffca9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtModifyBootEntry : Unknown @ 0x26010a (jmp 0xffffffff8882e0f0|jmp 0xfffffffffffffda9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenMutant : Unknown @ 0x26010a (jmp 0xffffffff8882e060|jmp 0xfffffffffffffd59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetSystemPowerState : Unknown @ 0x26010a (jmp 0xffffffff8882d860|jmp 0xfffffffffffffde9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePortEx : Unknown @ 0x26010a (jmp 0xffffffff8882ef10|jmp 0xfffffffffffffb89|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtShutdownSystem : Unknown @ 0x26010a (jmp 0xffffffff8882d7e0|jmp 0xfffffffffffffdf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenIoCompletion : Unknown @ 0x26010a (jmp 0xffffffff8882e180|jmp 0xfffffffffffffc99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAddBootEntry : Unknown @ 0x26010a (jmp 0xffffffff8882e8f0|jmp 0xfffffffffffffdc9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtReplyWaitReceivePort : Unknown @ 0x26010a (jmp 0xffffffff8882f100|jmp 0xfffffffffffffb99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDeleteBootEntry : Unknown @ 0x26010a (jmp 0xffffffff8882e460|jmp 0xfffffffffffffdb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSetBootEntryOrder : Unknown @ 0x26010a (jmp 0xffffffff8882daa0|jmp 0xfffffffffffffd99|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSection : Unknown @ 0x26010a (jmp 0xffffffff8882ed00|jmp 0xfffffffffffffcd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDebugActiveProcess : Unknown @ 0x26010a (jmp 0xffffffff8882e660|jmp 0xfffffffffffffbe9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAssignProcessToJobObject : Unknown @ 0x26010a (jmp 0xffffffff8882e870|jmp 0xfffffffffffffc59|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEvent : Unknown @ 0x26010a (jmp 0xffffffff8882ec30|jmp 0xfffffffffffffd19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtAlpcSendWaitReceivePort : Unknown @ 0x26010a (jmp 0xffffffff8882e980|jmp 0xfffffffffffffb79|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtNotifyChangeKey : Unknown @ 0x26010a (jmp 0xffffffff8882e300|jmp 0xfffffffffffffb69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenEventPair : Unknown @ 0x26010a (jmp 0xffffffff8882e130|jmp 0xfffffffffffffcf9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEvent : Unknown @ 0x26010a (jmp 0xffffffff8882eba0|jmp 0xfffffffffffffd29|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateSemaphore : Unknown @ 0x26010a (jmp 0xffffffff8882e5a0|jmp 0xfffffffffffffd49|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtSystemDebugControl : Unknown @ 0x26010a (jmp 0xffffffff8882d780|jmp 0xfffffffffffffdd9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateMutant : Unknown @ 0x26010a (jmp 0xffffffff8882e610|jmp 0xfffffffffffffd69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtLoadDriver : Unknown @ 0x26010a (jmp 0xffffffff8882e140|jmp 0xfffffffffffffe19|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtCreateEventPair : Unknown @ 0x26010a (jmp 0xffffffff8882e6e0|jmp 0xfffffffffffffd09|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtQueueApcThreadEx : Unknown @ 0x26010a (jmp 0xffffffff8882de80|jmp 0xfffffffffffffbb9|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtDuplicateObject : Unknown @ 0x26010a (jmp 0xffffffff8882ed20|jmp 0xfffffffffffffc69|jmp 0xfffffffffffffff0)
[IAT:Inl(Hook.IEAT)] (chrome.exe) ntdll.dll - NtOpenSemaphore : Unknown @ 0x26010a (jmp 0xffffffff8882e030|jmp 0xfffffffffffffd39|jmp 0xfffffffffffffff0)

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: Hitachi HDS721050CLA362 SATA Disk Device +++++
--- User ---
[MBR] dac306ff7eecfe12ee6cd6f1987aa8e1
[BSP] 20cce1f520501511ad780fceb212ba76 : Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Unknown Bootstrap | Unknown Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 466257 MB [Unknown Bootstrap | Unknown Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 955101184 | Size: 10581 MB [Unknown Bootstrap | Unknown Bootloader]
User = LL1 ... OK
User = LL2 ... OK


============================================
RKreport_SCN_01192015_224334.log

Malekal_morte- · Answer

Ca donne quoi ?

jadri87 · Answer

Bonjour,

Ca a l'air pas mal!!! Enfin!
Seulement j'ai toujours un soucis avec chrome; Quand j'ouvre chrome qui est épinglé dans la barre des tâches, le chrome sur lequel je clique ne s'ouvre pas mais c'est un 2eme chrome qui vient sur la barre et s'ouvre à la place...

Merci beaucoup!

jadri87 · Answer

Bon finalement, je me suis avancé, toujours les fenêtres qui s'ouvrent et les pubs ads...

Malekal_morte- · Answer

Réinitialise tes navigateurs et ou manuellement reparamètre tes navigateurs WEB (page de démarrage, moteur de recherche etc) mais aussi supprimer/désactiver les extensions inutiles/parasites :
* Firefox : https://www.malekal.com/reparer-firefox/?t=36057&start=
* Google Chrome : https://www.malekal.com/reparer-google-chrome/?t=35837&start=
* Internet Explorer et modules complémentaires / moteurs de recherche : https://forum.malekal.com/viewtopic.php?t=41399&start=

jadri87 · Answer

Merci beaucoup, cela a l'air de fonctionner maintenant. J'ai toujours mon deuxième chrome qui s'ouvre quand j'ouvre celui de la barre des tâches mais c'est pas gênant.
J'ai récupéré un autre PC et il me fait des trucs louches. Je peux t'envoyer les rapports?

Merci du service!

tenzounnet35 · Answer

bonsoir Malekal_morte- 

j'ai le même soucis concernant les ads by ... sur mon ordinateur . je suis sous W7  en x64. 

pouvez vous me venir en aide?

ci joint les 3 liens via FRST64.exe

https://pjjoint.malekal.com/files.php?id=20150316_c11f5w14z13v8

https://pjjoint.malekal.com/files.php?id=20150316_r7g11o12w610

https://pjjoint.malekal.com/files.php?id=20150316_515d14v5w15

je reste à votre disposition pour tout renseignement complémentaires. 

merci d'avance.

tenzounnet35 · Answer

bonsoir

merci pour ta réactivité. désolé pour la lenteur de ma réponse mais mon pc rame vraiment
voici le rapport de adwcleaner
 https://pjjoint.malekal.com/files.php?id=20150316_t13y6b9j9h7

en ce qui concerne Rogue, le site ne m'a proposé qu une version premium. y a t il une altenative?

ducoup j'ai fait manuellement les Modifications des paramètres des cartes come indiqué sur le tuto

tenzounnet35 · Answer

ok 
voici le rapport fixlog:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by cris at 2015-03-17 18:56:14 Run:1
Running from C:\Users\cris\Desktop
Loaded Profiles: cris (Available profiles: cris & the boss)
Boot Mode: Normal
==============================================

Content of fixlist:


2014-11-15 07:48 - 2014-11-15 07:48 - 1499040 _____ (browser) C:\Users\cris\AppData\Roaming\JJHSPH.exe 
 2014-11-15 07:47 - 2014-11-15 07:47 - 1981344 _____ (browser) C:\Users\cris\AppData\Roaming\SGPU.exe 
 2011-12-29 23:52 - 2011-12-29 23:53 - 78997938 _____ (Nero AG) C:\Users\cris\AppData\Roaming\Temp6832.exe 
 2014-12-11 21:54 - 2014-12-11 21:54 - 0022528 _____ () C:\Users\cris\AppData\Local\dsisetup158560502.exe 
 2014-11-15 08:02 - 2014-11-15 08:02 - 0613012 _____ (CMI Limited) C:\Users\cris\AppData\Local
sp9EB1.tmp 
 S2 0c632643; C:\Windows\system32undll32.exe c:\progra~3\intere~1\InterenetOptimizerSvc.dll,service 
 FF Extension: Extension_Protected - C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack [2014-02-09] 
FF Extension: moredisplayresolutionsmhafaicom - C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\more-display-resolutions@mhafai.com [2014-11-19] 



C:\Users\cris\AppData\Roaming\JJHSPH.exe => Moved successfully.
C:\Users\cris\AppData\Roaming\SGPU.exe => Moved successfully.
C:\Users\cris\AppData\Roaming\Temp6832.exe => Moved successfully.
C:\Users\cris\AppData\Local\dsisetup158560502.exe => Moved successfully.
C:\Users\cris\AppData\Local
sp9EB1.tmp => Moved successfully.
0c632643 => Service deleted successfully.
C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack => Moved successfully.
C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\more-display-resolutions@mhafai.com => Moved successfully.

==== End of Fixlog 18:56:15 ====Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by cris at 2015-03-17 18:56:14 Run:1
Running from C:\Users\cris\Desktop
Loaded Profiles: cris (Available profiles: cris & the boss)
Boot Mode: Normal
==============================================

Content of fixlist:


2014-11-15 07:48 - 2014-11-15 07:48 - 1499040 _____ (browser) C:\Users\cris\AppData\Roaming\JJHSPH.exe 
 2014-11-15 07:47 - 2014-11-15 07:47 - 1981344 _____ (browser) C:\Users\cris\AppData\Roaming\SGPU.exe 
 2011-12-29 23:52 - 2011-12-29 23:53 - 78997938 _____ (Nero AG) C:\Users\cris\AppData\Roaming\Temp6832.exe 
 2014-12-11 21:54 - 2014-12-11 21:54 - 0022528 _____ () C:\Users\cris\AppData\Local\dsisetup158560502.exe 
 2014-11-15 08:02 - 2014-11-15 08:02 - 0613012 _____ (CMI Limited) C:\Users\cris\AppData\Local
sp9EB1.tmp 
 S2 0c632643; C:\Windows\system32undll32.exe c:\progra~3\intere~1\InterenetOptimizerSvc.dll,service 
 FF Extension: Extension_Protected - C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack [2014-02-09] 
FF Extension: moredisplayresolutionsmhafaicom - C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\more-display-resolutions@mhafai.com [2014-11-19] 



C:\Users\cris\AppData\Roaming\JJHSPH.exe => Moved successfully.
C:\Users\cris\AppData\Roaming\SGPU.exe => Moved successfully.
C:\Users\cris\AppData\Roaming\Temp6832.exe => Moved successfully.
C:\Users\cris\AppData\Local\dsisetup158560502.exe => Moved successfully.
C:\Users\cris\AppData\Local
sp9EB1.tmp => Moved successfully.
0c632643 => Service deleted successfully.
C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\jid0-O6MIff3eO5dIGf5Tcv8RsJDKxrs@jetpack => Moved successfully.
C:\Users\cris\AppData\Roaming\Mozilla\Firefox\Profiles\x9s8lm2y.default\Extensions\more-display-resolutions@mhafai.com => Moved successfully.
 End of Fixlog 18:56:15 
je redémarre l'ordi , je réinitialise et te redis

Arnold · Answer

Chers amis, au secours......

Ads by cloudscout me rend la vie impossible, j'ai lu vos recommendations ci dessus et je viens avec les liens pjjoint(FRST, ADDITION, SHORTCUT, ROGUEKILLER, ADCLEANER) ci dessous:

FRST: http://pjjoint.malekal.com/files.php?id=FRST_20150328_b8x7c7z5c14

ADDITION: http://pjjoint.malekal.com/files.php?id=20150328_e10j1111q11r11

SHORTCUT: http://pjjoint.malekal.com/files.php?id=20150328_z14o14s6y14t5

ROGUEKILLER: http://pjjoint.malekal.com/files.php?id=20150328_6z8j11i10f15

ADCLEANER: http://pjjoint.malekal.com/files.php?id=20150328_u12z10p6b14y8

Merci d'avance pour votre aide.
Arnold.

Chahn · Answer

Bonsoir, Ads by cloudscout me rend aussi la vie impossible donc je viens avec les liens pjjoint en espérant que quelqu'un m'aide (FRST, ADDITION, SHORTCUT) ci dessous: 

ADDITION:  https://pjjoint.malekal.com/files.php?id=20150328_s12r9q7t5f15

FRST: https://pjjoint.malekal.com/files.php?id=20150328_r6m5c13x8n14

SHORTCUT: https://pjjoint.malekal.com/files.php?id=20150328_k14j7o11l9c13
 
Merci d'avance !

Lulu · Answer

http://pjjoint.malekal.com/files.php?id=20150406_v9y15f7l6i11

Luminour · Answer

Bonjour 
J'ai le même problème que les autres, pouvez vous m'aider, car je suis plus capable de voir adds by cloudscout
Voici les liens que vous avez demandé dans les autres messages

https://pjjoint.malekal.com/files.php?id=20150410_r10m8j11f13d14
https://pjjoint.malekal.com/files.php?id=20150410_6l7h15j14w6
https://pjjoint.malekal.com/files.php?id=20150410_p6d7z10l12l9

Merci à l'avance de venir à mon secours

osTT_RX · Answer

Bonjour, 

Egalement de nombreuses pubs intempestives "ads by ClouScout" génant fortement la navigation internet et le fonctionnement général de l'ordinateur.

Après avoir suivis votre note  explicative, voicis les fichiers donnés par FRST:
https://pjjoint.malekal.com/files.php?id=FRST_20150416_h10b14d13e14i6
https://pjjoint.malekal.com/files.php?id=20150416_t13s14q5n13s6
https://pjjoint.malekal.com/files.php?id=20150416_o11d14m13e13j9

Merci par avance de votre aide, elle me serait précieuse.
Cordialement

Configuration: Windows / Chrome 39.0.2171.65

Malekal_morte- · Answer

Créez votre propre sujet svp.

Supprimer Ads by CloudScout - Page 2

End of Fixlog 20:54:53

Discussions similaires

Newsletters