Rookit effacé ou non ?Résolu/Fermé

Question

Bonjour,
un jour, mon avast me dit d'un coup que mon PC contient un rookit, qu'il peut être dangereux et que je devrai le supprimer. Donc, je click sur supprimer, et une autre fenêtre s'ouvre disant que j'ai un virus dans mon pc et qu'il est dangereux de travailler avec; et me demande si je veux redémarrer et faire une analyse au démarrage. Je click oui mais il me dit impossible. Donc mon PC redémarre et je lance quand même un scan avec Avast, qui ne détecte rien. Même chose avec Adaware et Spybot (que je n'arrive pas à mettre à jour car il est "corrompu"(?)).
Est-ce que quelqu'un aurait une solution SVP ? Merci !

benurrr · Answer

slt pour les rootkit essaye de scanner avec se logiciel et ton avast esque il est a jour https://www.cnetfrance.fr/telecharger/gmer-39238200s.htm

Apocalypse17 · Answer

Ben merci en tous cas je vais essayer mais j'ai rien compris à vos explications, je suis nulle en informatique ! 
oui, avast est à jour.

Apocalypse17 · Answer

Merci ben je vais essayer !

Apocalypse17 · Answer

Et bien je viens d'ouvrir Gmer mais il n'a pas demander d'installation, il a s'est ouvert fenêtre et je n'y comprends rien... pouvez vous m'aider SVP ? j'ai peur de faire une bêtise.

Apocalypse17 · Answer

Oups désolée permettez moi de rectifier ma phrase : je voulais juste dire qu'il s'était ouvert.

Apocalypse17 · Answer

Oups, je remet ce que j'ai mis dans un autre poste : Gmer me dit que il y a des choses (rookit/malware) liés à avast.

Apocalypse17 · Answer

J'ai essayé votre premier lien  et j'ai bien mis aucune mais il me demande la taille etc... dois-je y mettre n'importe quoi ?

Apocalypse17 · Answer

Désolée, ça va sacrement encombrer la discussion, mais voila le rapport du scan dans l'onglet Rookit/Malware de Gmer

GMER 1.0.14.14205 - http://www.gmer.net
Rootkit scan 2008-05-26 11:32:49
Windows 5.1.2600 Service Pack 1


---- System - GMER 1.0.14 ----

SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwClose [0xF68CD588]
SSDT            \SystemRoot\system32\drivers\fwdrv.sys                                                                            ZwCreateFile [0xF6B1F830]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwCreateKey [0xF68CD444]
SSDT            \SystemRoot\system32\drivers\fwdrv.sys                                                                            ZwCreateProcess [0xF6B1F380]
SSDT            \SystemRoot\system32\drivers\fwdrv.sys                                                                            ZwCreateProcessEx [0xF6B1F2B0]
SSDT            \SystemRoot\system32\drivers\fwdrv.sys                                                                            ZwCreateThread [0xF6B1F5E0]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwDeleteValueKey [0xF68CD922]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwDuplicateObject [0xF68CD01C]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwOpenKey [0xF68CD51E]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwOpenProcess [0xF68CCF5C]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwOpenThread [0xF68CCFC0]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwQueryValueKey [0xF68CD63E]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwRestoreKey [0xF68CD5FE]
SSDT            \SystemRoot\system32\drivers\fwdrv.sys                                                                            ZwResumeThread [0xF6B1F630]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                             ZwSetValueKey [0xF68CD77E]

---- Kernel code sections - GMER 1.0.14 ----

.text           ntoskrnl.exe!KeInitializeInterrupt + B67                                                                          804DA23C 1 Byte  [ 06 ]
.text           ntoskrnl.exe!KeI386Call16BitCStyleFunction + 170                                                                  805025EC 4 Bytes  [ 88, D5, 8C, F6 ]
.text           ntoskrnl.exe!KeI386Call16BitCStyleFunction + 1A0                                                                  8050261C 4 Bytes  [ 30, F8, B1, F6 ]
.text           ntoskrnl.exe!KeI386Call16BitCStyleFunction + 1B0                                                                  8050262C 4 Bytes  [ 44, D4, 8C, F6 ]
.text           ntoskrnl.exe!KeI386Call16BitCStyleFunction + 1C8                                                                  80502644 8 Bytes  [ 80, F3, B1, F6, B0, F2, B1, ... ]
.text           ntoskrnl.exe!KeI386Call16BitCStyleFunction + 1E0                                                                  8050265C 4 Bytes  [ E0, F5, B1, F6 ]
.text           ...                                                                                                               
PAGENDSM        NDIS.sys!NdisMIndicateStatus                                                                                      F85F887D 6 Bytes  JMP F6B1A540 \SystemRoot\system32\drivers\fwdrv.sys

---- User code sections - GMER 1.0.14 ----

.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!StrStrW + FFE3764C                                  7739215D 66 Bytes  [ 45, C4, 77, 07, 72, C4, 77, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!StrStrW + FFE3768F                                  773921A0 131 Bytes  [ EB, 1E, C4, 77, 68, 4E, C4, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!StrStrW + FFE37713                                  77392224 103 Bytes  [ 2B, A0, C5, 77, FA, 42, C5, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!StrStrW + FFE3777B                                  7739228C 6 Bytes  [ 11, 08, D2, 77, C8, 5D ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!StrStrW + FFE37782                                  77392293 325 Bytes  [ 77, 61, 08, D2, 77, A8, 16, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFree + 96                                         773BB476 39 Bytes  [ 00, 00, 92, 04, 44, 64, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFree + BE                                         773BB49E 1 Byte  [ 74 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFree + C0                                         773BB4A0 7 Bytes  [ 00, 00, 90, 90, 43, 00, 53 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFree + C8                                         773BB4A8 11 Bytes  [ 43, 00, 53, 00, 74, 00, 61, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFree + D4                                         773BB4B4 23 Bytes  [ 73, 00, 00, 00, 46, 00, 69, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllRegisterServer + A                               773BB754 5 Bytes  [ 69, 00, 7A, 00, 65 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllRegisterServer + 10                              773BB75A 33 Bytes  [ 00, 00, 46, 00, 72, 00, 61, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDiskFreeSpaceExW + 16                          773BB77C 5 Bytes  [ 20, 00, 52, 00, 61 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDiskFreeSpaceExW + 1C                          773BB782 15 Bytes  [ 74, 00, 65, 00, 00, 00, 41, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDiskFreeSpaceExW + 2C                          773BB792 23 Bytes  [ 20, 00, 46, 00, 6F, 00, 72, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDiskFreeSpaceExW + 44                          773BB7AA 5 Bytes  [ 69, 00, 6F, 00, 20 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDiskFreeSpaceExW + 4A                          773BB7B0 1 Byte  [ 53 ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILGetSize + 2                                       773BBA2A 7 Bytes  [ 61, 00, 4D, 00, 6F, 00, 64 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILGetSize + A                                       773BBA32 3 Bytes  [ 65, 00, 6C ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILGetSize + E                                       773BBA36 47 Bytes  [ 00, 00, 4C, 00, 69, 00, 6E, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILGetSize + 3E                                      773BBA66 3 Bytes  [ 6E, 00, 74 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHAlloc                                             773BBA6A 35 Bytes  [ 00, 00, 44, 00, 6F, 00, 63, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILClone + D                                         773BBA8E 41 Bytes  [ 6F, 00, 63, 00, 4E, 00, 6F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILClone + 37                                        773BBAB8 45 Bytes  [ 43, 00, 6F, 00, 75, 00, 6E, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCombine                                           773BBAE6 18 Bytes  [ 4C, 00, 69, 00, 6E, 00, 65, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCombine + 13                                      773BBAF9 88 Bytes  [ 00, 90, 90, 44, 00, 6F, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindLastID                                        773BBB52 47 Bytes  [ 6F, 00, 63, 00, 4C, 00, 61, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindLastID + 30                                   773BBB82 3 Bytes  [ 75, 00, 6E ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindLastID + 34                                   773BBB86 47 Bytes  [ 74, 00, 00, 00, 90, 90, 44, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindLastID + 64                                   773BBBB6 13 Bytes  [ 6C, 00, 61, 00, 74, 00, 65, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindLastID + 72                                   773BBBC4 1 Byte  [ 74 ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathW + 3D                               773BBC18 13 Bytes  [ 44, 00, 6F, 00, 63, 00, 50, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathW + 4B                               773BBC26 31 Bytes  [ 43, 00, 6F, 00, 75, 00, 6E, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathW + 6B                               773BBC46 3 Bytes  [ 65, 00, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathW + 6F                               773BBC4A 19 Bytes  [ 90, 90, 44, 00, 6F, 00, 63, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathW + 83                               773BBC5E 49 Bytes  [ 62, 00, 65, 00, 72, 00, 00, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHLoadOLE + 5                                       773BBF90 19 Bytes  [ 2E, 00, 00, 00, 11, 00, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHLoadOLE + 19                                      773BBFA4 30 Bytes  [ 11, 00, 00, 00, 12, 00, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHLoadOLE + 39                                      773BBFC4 27 Bytes  [ 36, 00, 00, 00, 11, 00, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHLoadOLE + 55                                      773BBFE0 16 Bytes  [ A4, 7A, 00, 00, A4, 7A, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHLoadOLE + 67                                      773BBFF2 28 Bytes  [ 00, 00, 00, 00, 00, 00, 40, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCloneFirst + E                                    773BC4B4 12 Bytes  [ 00, 8B, F3, C1, E6, 02, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCloneFirst + 1B                                   773BC4C1 2 Bytes  [ B1, FE ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCloneFirst + 21                                   773BC4C7 10 Bytes  [ 0F, 84, 45, 4A, 00, 00, 85, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDesktopFolder + 85                             773BC5A2 32 Bytes  [ 00, 00, 6A, 08, FF, 35, C0, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDesktopFolder + A6                             773BC5C3 50 Bytes  [ 60, 75, 3E, 77, C7, 40, 74, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDesktopFolder + D9                             773BC5F6 88 Bytes  [ 00, 00, 89, 48, 14, 89, 48, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDesktopFolder + 132                            773BC64F 33 Bytes  [ F1, 83, 66, 04, 00, C7, 46, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDesktopFolder + 154                            773BC671 34 Bytes  [ 01, 00, 00, 00, FF, 15, D4, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILRemoveLastID + 2C                                 773BC974 10 Bytes  [ 56, 57, 8B, 7C, 24, 0C, 8D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILRemoveLastID + 37                                 773BC97F 98 Bytes  [ 15, BC, 19, 39, 77, 85, C0, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILRemoveLastID + 9A                                 773BC9E2 38 Bytes  [ B8, D0, 79, 39, 77, 33, C9, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILRemoveLastID + C1                                 773BCA09 7 Bytes  [ 15, 58, 77, E8, BD, FF, FF ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILRemoveLastID + C9                                 773BCA11 33 Bytes  [ 50, FF, 15, B0, 20, 39, 77, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetClassObject + 2                               773BD0F1 4 Bytes  [ F8, 53, 8D, 45 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetClassObject + 85                              773BD174 10 Bytes  [ 8D, 45, FC, 50, 8B, CE, E8, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetClassObject + 90                              773BD17F 73 Bytes  [ 85, C0, 0F, 8C, 83, 00, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetClassObject + DA                              773BD1C9 62 Bytes  [ 8B, 08, 8D, 55, F0, 52, 6A, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCoCreateInstance + 26                             773BD208 16 Bytes  [ 51, 08, 33, C0, 5F, 40, 5E, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCoCreateInstance + 37                             773BD219 72 Bytes  [ 83, 6C, 24, 04, 08, EB, F3, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCoCreateInstance + 80                             773BD262 52 Bytes  [ 00, 8B, 44, 24, 04, 8B, 40, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCoCreateInstance + B5                             773BD297 19 Bytes  [ 75, 10, 8B, 4D, 08, FF, 75, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCoCreateInstance + C9                             773BD2AB 131 Bytes  [ FF, 74, 24, 0C, 8B, 44, 24, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHRestricted + 64                                   773BD32F 29 Bytes  [ 8B, F3, 33, C0, F3, A7, 0F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHRestricted + 82                                   773BD34D 119 Bytes  [ FF, FF, 85, C0, 0F, 84, 81, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHRestricted + FA                                   773BD3C5 21 Bytes  [ C0, C9, C2, 04, 00, 55, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHRestricted + 110                                  773BD3DB 44 Bytes  [ FF, FF, 8B, F0, 8B, 43, 4C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHRestricted + 13D                                  773BD408 11 Bytes  JMP C95B5E5F 
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderLocation + 48                     773BD5C4 6 Bytes  [ 00, 8B, F8, 83, 7D, 14 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderLocation + 4F                     773BD5CB 44 Bytes  [ 0F, 85, 7B, 02, 00, 00, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderLocation + 7C                     773BD5F8 2 Bytes  [ A4, FD ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderLocation + 80                     773BD5FC 202 Bytes  [ 85, C0, 0F, 85, 69, 61, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractIconExW + 14                                 773BD6C7 6 Bytes  [ FF, 75, 18, 8B, 10, FF ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractIconExW + 1B                                 773BD6CE 80 Bytes  [ 14, FF, 75, 10, 51, 50, FF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractIconExW + 6C                                 773BD71F 33 Bytes  [ 8B, D9, 68, 80, 72, 39, 77, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderLocation + 14                            773BD741 9 Bytes  [ 57, 8B, 7C, 24, 0C, 0F, 84, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderLocation + 1F                            773BD74C 5 Bytes  [ 57, E8, 85, FB, FF ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderLocation + 25                            773BD752 25 Bytes  [ 85, C0, 0F, 84, 71, 0C, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderLocation + 3F                            773BD76C 49 Bytes  [ 55, 8B, EC, 51, 53, 56, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderLocation + 71                            773BD79E 12 Bytes  [ 15, 6C, 1A, 39, 77, 89, 7D, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsEqual + 8                                       773BD8BF 57 Bytes  [ FF, 8B, 5D, 10, 2B, 5D, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsEqual + 42                                      773BD8F9 42 Bytes  JMP 02E1CC00 
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsEqual + 6D                                      773BD924 31 Bytes  [ 84, F1, A7, 07, 00, FF, 74, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsEqual + 8D                                      773BD944 17 Bytes  [ 80, C2, 08, 00, 8B, 4C, 24, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsEqual + BD                                      773BD974 14 Bytes  [ 00, 8B, F0, 85, F6, 74, 32, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHParseDisplayName + 3B                             773BE8BB 13 Bytes  [ 10, 6A, 01, FF, 74, 24, 10, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHParseDisplayName + 49                             773BE8C9 81 Bytes  [ FF, FF, C2, 08, 00, 3B, F0, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHParseDisplayName + 9B                             773BE91B 120 Bytes  [ 06, 66, 85, C0, 74, 0C, 0F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHParseDisplayName + 114                            773BE994 146 Bytes  [ 80, F9, 30, 0F, 85, 1C, C5, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHParseDisplayName + 1A7                            773BEA27 61 Bytes  [ 0E, D9, 02, 00, 03, C1, 66, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHILCreateFromPath                                  773BEAA0 19 Bytes  [ A8, 01, 0F, 85, 95, 03, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHILCreateFromPath + 14                             773BEAB4 114 Bytes  [ 74, 24, 08, 8B, F1, E8, 1B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCreateFromPath + 43                               773BEB29 1 Byte  [ 08 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCreateFromPath + 45                               773BEB2B 15 Bytes  [ 09, 00, 00, 00, F7, D8, 1B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCreateFromPath + 55                               773BEB3B 43 Bytes  [ 83, EC, 10, 56, FF, 75, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCreateFromPath + 81                               773BEB67 7 Bytes  [ 15, D4, 1F, 39, 77, C2, 04 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILCreateFromPath + 89                               773BEB6F 27 Bytes  [ 33, C0, EB, F9, 55, 8B, EC, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSetSettings + E                                773BF12B 158 Bytes  [ 75, 0C, 8B, F1, 8D, 8D, D8, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSetSettings + AD                               773BF1CA 4 Bytes  [ 8C, 45, CE, 02 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSetSettings + B2                               773BF1CF 19 Bytes  [ 83, A5, D8, FB, FF, FF, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSetSettings + C6                               773BF1E3 43 Bytes  [ F3, AB, 8B, 43, 70, 85, C0, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSetSettings + F2                               773BF20F 108 Bytes  [ DC, FB, FF, FF, 50, FF, 75, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotification_Unlock + 73                    773C0785 88 Bytes  [ C7, 5F, 5E, C9, C2, 04, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotification_Unlock + CD                    773C07DF 125 Bytes  [ 8D, 46, 20, 50, FF, 15, D8, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotification_Unlock + 14B                   773C085D 61 Bytes  [ 00, 8B, 46, 04, 85, C0, 74, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotification_Unlock + 189                   773C089B 22 Bytes  [ FF, 33, C0, 39, 46, 08, 5E, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotification_Unlock + 1A0                   773C08B2 8 Bytes  [ 75, 08, 8B, F9, 8D, 8D, D8, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsLFNDrive + 8                                      773C1844 22 Bytes  [ F3, A5, 8B, CA, 8B, 55, 18, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsLFNDrive + 1F                                     773C185B 7 Bytes  [ 03, 00, 50, FF, 15, DC, 1E ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsLFNDrive + 27                                     773C1863 91 Bytes  [ 77, 8B, 45, FC, 5F, 5E, 5B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsLFNDrive + 83                                     773C18BF 15 Bytes  [ EC, 51, F6, 45, 0D, 80, 53, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsLFNDrive + 93                                     773C18CF 56 Bytes  [ 7D, 14, 89, 4D, FC, 75, 42, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILSaveToStream                                      773C2B1E 40 Bytes  [ 00, 00, 50, FF, D7, 53, 8D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILSaveToStream + 29                                 773C2B47 49 Bytes  [ 00, 50, FF, D7, 8D, BE, A4, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILSaveToStream + 5B                                 773C2B79 28 Bytes  [ 5E, 5B, C3, 8B, 89, A8, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILSaveToStream + 78                                 773C2B96 163 Bytes  [ FF, FF, 8B, C8, 85, C9, 7C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILSaveToStream + 11C                                773C2C3A 14 Bytes  [ 4C, 24, 0C, 8B, F1, 8B, F8, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDataFromIDListW + 11                           773C385A 15 Bytes  [ 53, 56, 33, F6, 39, 75, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDataFromIDListW + 22                           773C386B 51 Bytes  [ 8D, 85, 00, F8, FF, FF, 50, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDataFromIDListW + 56                           773C389F 161 Bytes  [ 5F, 5E, 33, C0, 5B, C9, C2, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDataFromIDListW + F8                           773C3941 9 Bytes  [ 00, 00, 4C, 00, 00, 00, 8D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetDataFromIDListW + 102                          773C394B 15 Bytes  [ 00, 00, BE, 60, 45, 39, 77, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ShellExecuteExW + 1B                                773C7A59 133 Bytes  [ F6, 74, 52, 8B, CE, E8, 52, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ShellExecuteExW + A1                                773C7ADF 2 Bytes  [ 68, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ShellExecuteExW + B8                                773C7AF6 59 Bytes  [ 80, 25, DA, 22, 58, 77, EF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ShellExecuteExW + F4                                773C7B32 24 Bytes  [ C3, 53, 56, 57, 8B, F1, 8D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ShellExecuteExW + 10D                               773C7B4B 11 Bytes  [ 00, 8B, D8, 85, DB, 7C, 1C, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_MergeMenus                                    773C99B6 14 Bytes  [ 00, A1, CC, 21, 58, 77, 85, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_MergeMenus + F                                773C99C5 50 Bytes  [ E0, 6A, 02, 50, FF, 15, 64, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_MergeMenus + 42                               773C99F8 4 Bytes  [ F4, 89, 5D, FC ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_MergeMenus + 47                               773C99FD 6 Bytes  [ 5D, F8, E8, 66, 07, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_MergeMenus + 4E                               773C9A04 40 Bytes  [ 68, 00, 20, 00, 00, E8, BD, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHMapIDListToImageListIndexAsync + 8                773C9E4A 35 Bytes  [ 00, 75, 1C, 8D, 46, 04, 50, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHMapIDListToImageListIndexAsync + 2C               773C9E6E 32 Bytes  [ 8D, 86, 9C, 22, 00, 00, 50, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHMapIDListToImageListIndexAsync + BB               773C9EFD 201 Bytes  [ 8B, 45, 08, 56, 33, F6, 3B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHMapIDListToImageListIndexAsync + 186              773C9FC8 13 Bytes  [ 75, 10, 8D, 45, FC, 50, 68, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHMapIDListToImageListIndexAsync + 194              773C9FD6 20 Bytes  [ 00, 80, FF, D6, 83, 7D, FC, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsSlowW + 2E                                    773CA37E 94 Bytes  [ 8B, 45, FC, 5F, 5E, 5B, C9, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsSlowW + 8D                                    773CA3DD 20 Bytes  [ 00, 00, 00, 8B, D8, 85, DB, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconW + 5                               773CA3F2 114 Bytes  [ 51, 51, 53, 56, 8B, 35, 98, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconW + 79                              773CA466 48 Bytes  [ 0C, 83, C4, 0C, FF, 75, 10, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHExtractIconsW                                     773CA497 1 Byte  [ 57 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHExtractIconsW + 2                                 773CA499 28 Bytes  [ 7D, 10, 89, 5D, FC, 74, 46, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHExtractIconsW + 1F                                773CA4B6 132 Bytes  [ 15, C4, 18, 39, 77, 56, 89, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHExtractIconsW + CB                                773CA562 37 Bytes  [ C0, 89, 43, 04, 74, 1C, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHExtractIconsW + 148                               773CA5DF 20 Bytes  [ 8D, 5E, F0, 8B, CB, E8, BE, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractVersionResource16W + 1F                      773CB832 41 Bytes  [ FF, 75, 08, FF, 15, D8, 20, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractVersionResource16W + 49                      773CB85C 241 Bytes  [ 7D, FC, 00, 0F, 8C, 6E, 7A, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractVersionResource16W + 13B                     773CB94E 14 Bytes  [ FF, 83, FF, 08, 7F, 03, 89, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractVersionResource16W + 14B                     773CB95E 2 Bytes  [ 60, 1A ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ExtractVersionResource16W + 14F                     773CB962 8 Bytes  [ 33, D2, 39, 1D, D4, 1C, 58, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_GetCachedImageIndex + 9                       773CCD70 126 Bytes  [ C3, C7, 05, 08, 20, 58, 77, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_GetImageLists + 25                            773CCDF0 25 Bytes  [ C8, 6E, 3E, 77, C3, C7, 05, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_GetImageLists + 3F                            773CCE0A 3 Bytes  [ C3, C7, 05 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_GetImageLists + 43                            773CCE0E 52 Bytes  [ 20, 58, 77, C8, 6E, 3E, 77, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!Shell_GetImageLists + 78                            773CCE43 45 Bytes  [ 05, B0, 20, 58, 77, C8, 6E, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHBindToParent + A                                  773CCE71 214 Bytes  [ 17, 58, 77, C8, 6E, 3E, 77, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DriveType + A2                                      773CCF48 36 Bytes  [ 2D, 50, 21, 58, 77, 04, 39, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DriveType + C8                                      773CCF6E 3 Bytes  [ 84, 10, 39 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DriveType + CC                                      773CCF72 21 Bytes  [ 83, 25, 54, 21, 58, 77, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DriveType + 11F                                     773CCFC5 5 Bytes  [ D7, 8B, BE, 80, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DriveType + 126                                     773CCFCC 48 Bytes  [ 3B, FB, 0F, 85, 92, 25, 07, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderPathW + 4B                        773CD0EC 7 Bytes  [ 77, 74, 05, E8, 57, 4A, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderPathW + 6C                        773CD10D 80 Bytes  [ 7C, 24, 14, 85, FF, 0F, 84, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderPathW + BD                        773CD15E 37 Bytes  [ 00, 55, 8B, EC, 51, 56, 68, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderPathW + E3                        773CD184 69 Bytes  [ 83, 3E, 00, 7E, 1A, 53, 57, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetSpecialFolderPathW + 129                       773CD1CA 43 Bytes  [ C7, 75, E6, EB, C5, 33, F6, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!RealDriveType + 15                                  773CDCAF 1 Byte  [ 94 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!RealDriveType + 19                                  773CDCB3 12 Bytes  [ 8D, 85, F4, FD, FF, FF, 50, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!RealDriveType + 26                                  773CDCC0 7 Bytes  [ 8D, 85, F4, FD, FF, FF, 50 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCloneSpecialIDList + 54                           773CDD27 9 Bytes  [ 39, 77, 56, FF, 15, 64, 1A, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCloneSpecialIDList + 5E                           773CDD31 18 Bytes  [ C0, 75, 03, 89, 75, 08, BE, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCloneSpecialIDList + 71                           773CDD44 100 Bytes  [ 75, 10, FF, 75, 0C, FF, 75, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsParent + 27                                     773CDDA9 57 Bytes  [ 45, 0C, 0F, 85, 51, FF, FF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsParent + 61                                     773CDDE3 33 Bytes  [ 44, 24, 08, 85, C0, 74, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsParent + 83                                     773CDE05 12 Bytes  [ A1, A4, 16, 58, 77, 85, C0, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILIsParent + 90                                     773CDE12 76 Bytes  [ FF, E0, 8B, 44, 24, 04, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindChild + 5F                                    773CDE9A 117 Bytes  [ 00, 0F, 84, 00, 99, 01, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindChild + D5                                    773CDF10 36 Bytes  [ 15, A8, 1A, 39, 77, E9, 10, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindChild + FA                                    773CDF35 4 Bytes  [ FF, 68, F8, 93 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindChild + FF                                    773CDF3A 35 Bytes  [ 77, 68, 9C, 00, 00, 00, 50, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILFindChild + 123                                   773CDF5E 33 Bytes  [ F0, F7, DE, 1B, F6, 46, E9, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsExe + 21                                      773CE5AA 56 Bytes  [ 00, 66, 39, 07, 0F, 84, 4F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsExe + 5A                                      773CE5E3 72 Bytes  [ FF, 85, C0, 89, 45, FC, 0F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsExe + A3                                      773CE62C 61 Bytes  JMP 6B387133 
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsExe + E1                                      773CE66A 117 Bytes  [ C6, 8D, 65, E4, 5F, 5E, 5B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathIsExe + 157                                     773CE6E0 39 Bytes  [ 7F, 04, 3B, FB, 0F, 84, 3A, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetPathFromIDListW + 52                           773CEEB7 12 Bytes  [ B6, 5C, 8E, 39, 77, FF, 75, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetPathFromIDListW + 5F                           773CEEC4 60 Bytes  [ 85, C0, 75, 1E, FF, 75, 10, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetPathFromIDListW + 9C                           773CEF01 31 Bytes  [ 74, 24, 0C, FF, 74, 24, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetPathFromIDListW + BC                           773CEF21 35 Bytes  [ 00, 8B, 75, 1C, 68, FF, FF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetPathFromIDListW + F7                           773CEF5C 5 Bytes  [ FF, 8B, 4C, 24, 04 ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetVersion + 19                                  773D052D 24 Bytes  [ 03, 8D, 74, 08, FE, 8B, 45, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetVersion + 32                                  773D0546 75 Bytes  [ 06, 66, 01, 07, 0F, B7, 06, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetVersion + 7E                                  773D0592 24 Bytes  [ C0, 0F, 8C, 1E, AC, FF, FF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetVersion + 97                                  773D05AB 92 Bytes  [ EC, 83, EC, 18, 66, 83, 65, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllGetVersion + F4                                  773D0608 188 Bytes  [ FF, 83, FE, 02, 8D, 75, EC, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllCanUnloadNow + 34                                773D085B 85 Bytes  [ 50, FF, 15, B8, 19, 39, 77, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllCanUnloadNow + 8A                                773D08B1 18 Bytes  [ 3B, 05, 20, 93, 39, 77, 0F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllCanUnloadNow + 9D                                773D08C4 4 Bytes  [ 85, 7C, 6B, 02 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllCanUnloadNow + A2                                773D08C9 114 Bytes  [ 8B, 75, 10, 6A, 04, 59, BF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DllCanUnloadNow + 115                               773D093C 2 Bytes  [ 4C, FE ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathA + 5D                               773D0D77 7 Bytes  [ 8D, 45, D4, 50, E8, D2, 03 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathA + 65                               773D0D7F 12 Bytes  [ FF, 8B, F8, 85, FF, 7C, 0D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathA + 72                               773D0D8C 23 Bytes  [ 75, 0C, 56, FF, 10, 8B, F8, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathA + 8A                               773D0DA4 3 Bytes  [ 69, FF, FF ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHGetFolderPathA + 8E                               773D0DA8 66 Bytes  [ 56, FF, 74, 24, 08, 8B, F1, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyRegister + 10                         773D1678 24 Bytes  [ 50, 8B, 45, FC, C7, 45, FC, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyRegister + 29                         773D1691 73 Bytes  [ 59, 5F, 5E, 5B, C9, 51, C3, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyRegister + 73                         773D16DB 29 Bytes  [ D0, C2, 08, 00, 83, 7C, 24, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyRegister + 92                         773D16FA 3 Bytes  [ 0F, 84, 74 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyRegister + 96                         773D16FE 53 Bytes  [ FF, FF, FF, 74, 24, 04, 6A, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!OpenRegStream + E                                   773D3DD1 16 Bytes  [ 8B, 08, 8D, 55, FC, 52, FF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!OpenRegStream + 1F                                  773D3DE2 11 Bytes  [ 0F, 8F, 07, F4, 00, 00, 33, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!OpenRegStream + 2C                                  773D3DEF 34 Bytes  [ 8B, 89, A0, 00, 00, 00, 33, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!OpenRegStream + 4F                                  773D3E12 37 Bytes  [ 83, F9, 08, 0F, 84, C5, 80, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!OpenRegStream + 75                                  773D3E38 2 Bytes  [ 35, CB ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCreateShellFolderView + E                         773D448E 60 Bytes  [ 00, 6A, 01, FF, 75, 08, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCreateShellFolderView + 4B                        773D44CB 29 Bytes  [ 8B, C8, C1, E1, 07, F7, D1, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCreateShellFolderView + 69                        773D44E9 70 Bytes  [ 56, FF, B3, AC, 01, 00, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCreateShellFolderView + B0                        773D4530 14 Bytes  [ FF, 85, C0, 0F, 85, 24, 5D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHCreateShellFolderView + BF                        773D453F 36 Bytes  [ 20, 0F, 85, 27, 90, 00, 00, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyDeregister + 19                       773D4DF0 27 Bytes  [ 53, 56, 57, 8B, F1, BB, 05, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyDeregister + 35                       773D4E0C 5 Bytes  [ 8D, 8E, 74, 02, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyDeregister + A4                       773D4E7B 18 Bytes  [ 15, 78, 15, 39, 77, 8B, CE, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyDeregister + B7                       773D4E8E 36 Bytes  [ F8, BD, 00, 02, 00, 00, 0B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotifyDeregister + 106                      773D4EDD 107 Bytes  [ 53, FF, 35, 68, 16, 58, 77, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathResolve + 34                                    773D587D 61 Bytes  [ FF, 15, 30, 13, 39, 77, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathResolve + 72                                    773D58BB 7 Bytes  [ 47, 14, 8B, 88, 48, 01, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathResolve + 7A                                    773D58C3 30 Bytes  [ F7, D9, 1B, C9, 81, E1, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathResolve + 99                                    773D58E2 33 Bytes  [ 8B, 44, 24, 20, 85, C0, 0F, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathResolve + BB                                    773D5904 13 Bytes  [ 74, 1C, 8B, 40, 04, 8B, 18, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DAD_ShowDragImage + 62                              773D6495 144 Bytes  [ 86, 54, 02, 00, 00, 85, C0, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DAD_ShowDragImage + F3                              773D6526 5 Bytes  [ FF, B6, 58, 02, 00 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DAD_ShowDragImage + 103                             773D6536 61 Bytes  [ 00, 85, C0, 0F, 85, A8, 58, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DAD_ShowDragImage + 141                             773D6574 79 Bytes  [ 68, 57, 00, 00, 40, E8, 4D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DAD_ShowDragImage + 191                             773D65C4 17 Bytes  [ 33, F6, EB, D7, 56, 57, 33, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILLoadFromStream + E                                773D6705 38 Bytes  [ 15, B0, 13, 39, 77, FF, 15, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILLoadFromStream + 35                               773D672C 73 Bytes  [ FF, 8B, 4D, 08, FF, 75, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILLoadFromStream + 7F                               773D6776 8 Bytes  [ 68, CC, 21, 58, 77, E8, A5, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILLoadFromStream + DA                               773D67D1 8 Bytes  [ 75, 08, 8D, 85, F8, FD, FF, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!ILLoadFromStream + E3                               773D67DA 25 Bytes  [ FF, 15, AC, 20, 39, 77, 8D, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileW + 4                                  773D935A 8 Bytes  [ 6A, 04, 8D, 4E, 08, E8, F1, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileW + D                                  773D9363 14 Bytes  [ FF, 85, C0, 0F, 84, 65, DC, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileAorW                                   773D9372 74 Bytes  [ 00, 33, C0, 5E, C3, 55, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileAorW + 4C                              773D93BE 59 Bytes  [ 35, 68, 16, 58, 77, 53, 6A, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileAorW + D7                              773D9449 208 Bytes  [ 33, DB, 53, 68, 60, E7, 39, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileAorW + 1A8                             773D951A 34 Bytes  [ 00, 8B, 06, 5F, 5E, C2, 04, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DragQueryFileAorW + 1CB                             773D953D 19 Bytes  [ FE, FF, FF, 50, FF, 75, 0C, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHUpdateRecycleBinIcon + 17                         773DACCB 56 Bytes  [ 74, 24, 0C, 68, 60, EF, 39, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHUpdateRecycleBinIcon + 50                         773DAD04 11 Bytes  [ FF, FF, 50, FF, 75, 14, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHUpdateRecycleBinIcon + 5C                         773DAD10 60 Bytes  [ 50, FF, 75, 0C, FF, 15, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHUpdateRecycleBinIcon + 99                         773DAD4D 124 Bytes  [ 75, 08, 8B, 4D, FC, FF, 75, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHUpdateRecycleBinIcon + 116                        773DADCA 12 Bytes  [ 8B, D8, 5F, 5E, 8B, C3, 5B, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathProcessCommand                                  773DB357 49 Bytes  [ 75, 10, FF, 75, 0C, 6A, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathProcessCommand + 32                             773DB389 100 Bytes  [ 57, 8B, 7C, 24, 10, 83, 27, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathProcessCommand + 97                             773DB3EE 5 Bytes  [ 00, 00, 83, 60, 18 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathProcessCommand + 9D                             773DB3F4 69 Bytes  [ C3, 56, 8B, 74, 24, 08, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!PathProcessCommand + E3                             773DB43A 303 Bytes  [ F0, 8B, 45, EC, 6A, 00, 19, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHSetLocalizedName + 42                             773E0C4C 30 Bytes  [ 4C, 85, A8, 85, C9, 0F, 8D, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHSetLocalizedName + 61                             773E0C6B 35 Bytes  [ 45, F0, 3B, 45, EC, 7C, 9C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHSetLocalizedName + 85                             773E0C8F 94 Bytes  [ 00, 74, 22, 6A, 01, 6A, 01, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHSetLocalizedName + E4                             773E0CEE 11 Bytes  [ 15, D0, 14, 39, 77, 8D, 45, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHFlushSFCache + 119                                773E0E2D 99 Bytes  [ 1D, D0, 14, 39, 77, 56, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHFlushSFCache + 17D                                773E0E91 66 Bytes  [ 06, 0F, 84, 85, 00, 00, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHFlushSFCache + 1C0                                773E0ED4 74 Bytes  [ 8B, 45, F0, 8B, 55, EC, 2B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHFlushSFCache + 20B                                773E0F1F 17 Bytes  [ 0B, 5E, 5B, C9, C2, 10, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHFlushSFCache + 250                                773E0F64 60 Bytes  [ 84, 75, F0, 06, 00, 83, 7E, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsNetDrive                                          773E25B9 133 Bytes  [ 8B, 83, 0C, 02, 00, 00, C1, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsNetDrive + 86                                     773E263F 8 Bytes  [ FF, 75, FC, 8D, 8E, EC, 00, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsNetDrive + AA                                     773E2663 3 Bytes  [ AD, 1B, FF ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsNetDrive + AE                                     773E2667 89 Bytes  [ 55, 8B, EC, 53, 8B, 5D, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsNetDrive + 108                                    773E26C1 12 Bytes  [ 00, 85, C0, 0F, 8C, DE, B6, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHTestTokenMembership                               773E39A3 88 Bytes  [ 85, FF, 75, 09, 39, 7D, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsUserAnAdmin + 1                                   773E39FC 25 Bytes  [ FC, 79, 3A, 77, FF, 75, 0C, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsUserAnAdmin + 1B                                  773E3A16 48 Bytes  [ D7, 85, C0, 0F, 84, AB, AD, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsUserAnAdmin + 4C                                  773E3A47 45 Bytes  [ 00, 85, C0, 74, 12, FF, 75, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsUserAnAdmin + 7A                                  773E3A75 29 Bytes  [ 74, 2A, 8B, 45, 0C, 89, 45, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!IsUserAnAdmin + 98                                  773E3A93 8 Bytes  [ 68, A5, 2A, 3E, 77, FF, 75, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconA + 9A                              773E3C2E 21 Bytes  [ 08, 50, FF, 51, 08, 3B, FB, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconA + B0                              773E3C44 19 Bytes  [ EC, 83, EC, 10, 56, 8B, 75, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconA + C4                              773E3C58 136 Bytes  [ 89, 7E, 14, 74, 06, 8B, 07, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconA + 14D                             773E3CE1 22 Bytes  [ 40, 18, C2, 04, 00, 56, 57, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHDefExtractIconA + 1C1                             773E3D55 5 Bytes  [ 57, E8, 22, 00, 00 ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DoEnvironmentSubstW + A0                            773E450F 11 Bytes  [ 8B, 86, 4C, 02, 00, 00, 8B, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DoEnvironmentSubstW + AC                            773E451B 1 Byte  [ 02 ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DoEnvironmentSubstW + AE                            773E451D 12 Bytes  [ 5E, C3, 6A, 20, FF, 75, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DoEnvironmentSubstW + BB                            773E452A 117 Bytes  [ 75, 10, 8B, CF, 89, 45, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!DoEnvironmentSubstW + 131                           773E45A0 137 Bytes  [ F2, 33, C0, F3, A7, 0F, 84, ... ]
.text           ...                                                                                                               
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SHELL32.dll!SHChangeNotification_Lock + 4A                      773E4A87 26 Bytes  [ 18, 8B, 03, 57, FF, 73, 08, ... ]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[344] SH

Apocalypse17 · Answer

merci pour votre aide !

Apocalypse17 · Answer

AVG signal que tout est clean. Dois-je poster "problème résolu" ?

Rookit effacé ou non ?

10 réponses

Discussions similaires

Newsletters