Anda di halaman 1dari 42

27/01/12 10:55:28

D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:28
A
27/01/12 10:55:28
A
27/01/12 10:55:28
R
27/01/12 10:55:28
A
27/01/12 10:55:28
R
27/01/12 10:55:28
A
27/01/12 10:55:28
R
27/01/12 10:55:28
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:31
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:31
A
27/01/12 10:55:31
D
call: DLL_PROCESS_DETACH
27/01/12 10:55:36
D
call: DLL_PROCESS_ATTACH
27/01/12 10:55:36
D
call: DLL_PROCESS_ATTACH
27/01/12 11:01:32
A
27/01/12 11:01:32
R
27/01/12 11:01:33
D
call: DLL_PROCESS_ATTACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1927086080 - Reason for


Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a
-> NtTerminateProcessCallback
Dejamos matar a
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for

27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:08:50
D
call: DLL_PROCESS_DETACH
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
A
27/01/12 11:10:26
A
27/01/12 11:10:26
R
27/01/12 11:10:26
A
27/01/12 11:10:26
R
27/01/12 11:10:26
A
27/01/12 11:10:26
R
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
A
27/01/12 11:10:26
A
27/01/12 11:10:26
A
27/01/12 11:10:26
A
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:26
A
27/01/12 11:10:26
D
call: DLL_PROCESS_DETACH
27/01/12 11:10:26
A
27/01/12 11:10:26
D
call: DLL_PROCESS_DETACH
27/01/12 11:10:27
A
27/01/12 11:10:33
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:36
D
call: DLL_PROCESS_ATTACH
27/01/12 11:10:36
D
call: DLL_PROCESS_ATTACH
27/01/12 11:11:04
A
27/01/12 11:11:04
D
call: DLL_PROCESS_DETACH
27/01/12 11:11:38
A
27/01/12 11:11:38
D
call: DLL_PROCESS_DETACH
27/01/12 11:12:07
A
27/01/12 11:12:07
D
call: DLL_PROCESS_DETACH
27/01/12 11:12:07
A
27/01/12 11:12:07
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1927086080 - Reason for


Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1927086080 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a
-> NtTerminateProcessCallback
Dejamos matar a
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for

27/01/12 11:12:11
A
27/01/12 11:12:11
D
call: DLL_PROCESS_DETACH
27/01/12 11:12:42
D
call: DLL_PROCESS_ATTACH
27/01/12 11:12:45
D
call: DLL_PROCESS_ATTACH
27/01/12 11:12:50
A
27/01/12 11:13:59
D
call: DLL_PROCESS_ATTACH
27/01/12 11:13:59
A
27/01/12 11:13:59
D
call: DLL_PROCESS_DETACH
27/01/12 11:13:59
D
call: DLL_PROCESS_ATTACH
27/01/12 11:13:59
A
27/01/12 11:14:00
D
call: DLL_PROCESS_DETACH
27/01/12 11:14:14
A
27/01/12 11:14:14
D
call: DLL_PROCESS_DETACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
A
07/02/12 17:14:42
A
07/02/12 17:14:42
R
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
A
07/02/12 17:14:42
A
07/02/12 17:14:42
A
07/02/12 17:14:42
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1945370624 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
->
->
->
->

CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback

07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:42
A
07/02/12 17:14:42
D
call: DLL_PROCESS_DETACH
07/02/12 17:14:42
A
07/02/12 17:14:42
D
call: DLL_PROCESS_DETACH
07/02/12 17:14:43
A
07/02/12 17:14:44
A
07/02/12 17:14:44
F
07/02/12 17:14:44
A
07/02/12 17:14:44
F
07/02/12 17:14:49
A
07/02/12 17:14:49
D
call: DLL_PROCESS_DETACH
07/02/12 17:14:50
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:50
D
call: DLL_PROCESS_ATTACH
07/02/12 17:14:59
A
07/02/12 17:14:59
D
call: DLL_PROCESS_DETACH
07/02/12 17:15:26
A
07/02/12 17:15:26
D
call: DLL_PROCESS_DETACH
07/02/12 17:17:13
D
call: DLL_PROCESS_ATTACH
07/02/12 17:17:42
A
07/02/12 17:17:42
D
call: DLL_PROCESS_DETACH
07/02/12 17:17:49
D
call: DLL_PROCESS_ATTACH
07/02/12 17:17:50
D
call: DLL_PROCESS_ATTACH
07/02/12 17:17:50
A
07/02/12 17:17:50
A
07/02/12 17:17:50
A
07/02/12 17:17:50
A
07/02/12 17:17:50
D
call: DLL_PROCESS_ATTACH
07/02/12 17:17:50
D
call: DLL_PROCESS_ATTACH
07/02/12 17:17:50
A
07/02/12 17:17:50
D
call: DLL_PROCESS_DETACH
07/02/12 17:17:50
A
07/02/12 17:17:50
D
call: DLL_PROCESS_DETACH
07/02/12 17:17:51
A
07/02/12 17:17:51
D
call: DLL_PROCESS_DETACH
07/02/12 17:17:51
A
07/02/12 17:17:51
D
call: DLL_PROCESS_DETACH
07/02/12 17:17:52
A
07/02/12 17:17:52
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1702625280 - Reason for


Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for

07/02/12 17:17:53
A
07/02/12 17:17:53
D
call: DLL_PROCESS_DETACH
07/02/12 17:18:16
D
call: DLL_PROCESS_ATTACH
07/02/12 17:18:21
D
call: DLL_PROCESS_ATTACH
07/02/12 17:18:21
A
07/02/12 17:18:23
D
call: DLL_PROCESS_ATTACH
07/02/12 17:18:28
A
07/02/12 17:18:41
A
07/02/12 17:18:41
A
07/02/12 17:18:41
O
07/02/12 17:18:41
V
07/02/12 17:18:41
V
07/02/12 17:18:42
D
call: DLL_PROCESS_ATTACH
07/02/12 17:18:44
A
07/02/12 17:18:44
D
call: DLL_PROCESS_DETACH
07/02/12 17:18:58
A
07/02/12 17:18:58
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:06
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:08
A
07/02/12 17:19:08
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:12
A
07/02/12 17:19:12
A
07/02/12 17:19:12
A
07/02/12 17:19:12
A
07/02/12 17:19:12
O
07/02/12 17:19:12
V
07/02/12 17:19:12
V
07/02/12 17:19:12
F
07/02/12 17:19:12
V
07/02/12 17:19:12
V
07/02/12 17:19:12
A
07/02/12 17:19:12
A
07/02/12 17:19:12
A
07/02/12 17:19:12
O
07/02/12 17:19:12
V
07/02/12 17:19:12
V
07/02/12 17:19:12
F
07/02/12 17:19:12
V
07/02/12 17:19:12
V
07/02/12 17:19:16
A
07/02/12 17:19:16
A
07/02/12 17:19:16
A
07/02/12 17:19:16
O
07/02/12 17:19:16
V
07/02/12 17:19:16
V
07/02/12 17:19:16
F
07/02/12 17:19:16
V
07/02/12 17:19:16
V
07/02/12 17:19:16
A
07/02/12 17:19:16
A
07/02/12 17:19:16
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: \\Ohle-00\EPSON B/N
DevMode Impresora: \\Ohle-00\EPSON B/N
DevMode Copies: 1
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
->
->
->
->

->
->
->

->
->
->

->
->
->

NtTerminateProcessCallback
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack

07/02/12 17:19:16
O
Impresora Final: CyberClient
07/02/12 17:19:16
V
DevMode Impresora: CyberClient
07/02/12 17:19:16
V
DevMode Copies: 1
07/02/12 17:19:16
F
lpszDevice: CyberClient
07/02/12 17:19:16
V
DevMode Impresora: CyberClient
07/02/12 17:19:16
V
DevMode Copies: 1
07/02/12 17:19:16
A
-> CreateDCWCallback
07/02/12 17:19:16
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:16
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:16
O
Impresora Final: CyberClient
07/02/12 17:19:16
V
DevMode Impresora: CyberClient
07/02/12 17:19:16
V
DevMode Copies: 1
07/02/12 17:19:16
F
lpszDevice: CyberClient
07/02/12 17:19:16
V
DevMode Impresora: CyberClient
07/02/12 17:19:16
V
DevMode Copies: 1
07/02/12 17:19:16
A
-> CreateDCWCallback
07/02/12 17:19:16
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:16
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:16
O
Impresora Final: CyberClient
07/02/12 17:19:16
V
DevMode Impresora: CyberClient
07/02/12 17:19:16
V
DevMode Copies: 1
07/02/12 17:19:16
F
lpszDevice: CyberClient
07/02/12 17:19:16
V
DevMode Impresora: CyberClient
07/02/12 17:19:16
V
DevMode Copies: 1
07/02/12 17:19:16
A
-> CreateDCWCallback
07/02/12 17:19:17
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:17
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:17
O
Impresora Final: CyberClient
07/02/12 17:19:17
V
DevMode Impresora: CyberClient
07/02/12 17:19:17
V
DevMode Copies: 1
07/02/12 17:19:17
F
lpszDevice: CyberClient
07/02/12 17:19:17
V
DevMode Impresora: CyberClient
07/02/12 17:19:17
V
DevMode Copies: 1
07/02/12 17:19:17
A
-> StartDocWCallback
07/02/12 17:19:17
N
DATOS EN PN ======================
07/02/12 17:19:17
N
Process: C:\Windows\Explorer.EXE
07/02/12 17:19:17
N
API: StartDocW
07/02/12 17:19:17
N
Copies: 1
07/02/12 17:19:17
N
Doc: Fotografa de pgina completa
07/02/12 17:19:17
N
Printer: CyberClient
07/02/12 17:19:17
N
Pages: 0
07/02/12 17:19:17
N
Params: 1702850726
07/02/12 17:19:17
F
VB: C:\Windows\Explorer.EXE|||StartDocW|||dc: 28
7375937; doc: "Fotografa de pgina completa"|||CyberClient|||||||||
07/02/12 17:19:17
I
Sending IPC to: VentanaCyberClient1
07/02/12 17:19:17
E
** IPC error
07/02/12 17:19:17
I
Answer: 0
07/02/12 17:19:17
A
-> EndDocCallback
07/02/12 17:19:17
N
DATOS EN PN ======================
07/02/12 17:19:17
N
Process: C:\Windows\Explorer.EXE
07/02/12 17:19:17
N
API: EndDoc
07/02/12 17:19:17
N
Copies: 1
07/02/12 17:19:17
N
Doc: Fotografa de pgina completa
07/02/12 17:19:17
N
Printer: CyberClient
07/02/12 17:19:17
N
Pages: 0
07/02/12 17:19:17
N
Params: 1702850726
07/02/12 17:19:17
F
VB: C:\Windows\Explorer.EXE|||EndDoc|||dc: 28737
5937; doc: "Fotografa de pgina completa"|||CyberClient|||0|||0|||1
07/02/12 17:19:17
I
Sending IPC to: VentanaCyberClient1
07/02/12 17:19:17
E
** IPC error

07/02/12 17:19:17
I
07/02/12 17:19:17
E
07/02/12 17:19:20
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:21
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:21
A
07/02/12 17:19:21
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:23
A
07/02/12 17:19:23
A
07/02/12 17:19:23
R
07/02/12 17:19:23
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:23
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:23
A
07/02/12 17:19:23
A
07/02/12 17:19:23
A
07/02/12 17:19:23
A
07/02/12 17:19:23
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:23
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:23
A
07/02/12 17:19:23
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:23
A
07/02/12 17:19:23
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:25
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:26
A
07/02/12 17:19:26
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:27
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:27
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:27
A
07/02/12 17:19:27
D
call: DLL_PROCESS_DETACH
07/02/12 17:19:29
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:31
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:31
D
call: DLL_PROCESS_ATTACH
07/02/12 17:19:38
A
07/02/12 17:19:38
A
07/02/12 17:19:38
A
07/02/12 17:19:38
O
07/02/12 17:19:38
V
07/02/12 17:19:38
V
07/02/12 17:19:38
F
07/02/12 17:19:38
V
07/02/12 17:19:38
V
07/02/12 17:19:38
A
07/02/12 17:19:38
A
07/02/12 17:19:38
A

Answer: 0
** AbortDoc
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
Enter DllMain -> Handle: 1702625280 - Reason for
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack

07/02/12 17:19:38
O
Impresora Final: CyberClient
07/02/12 17:19:38
V
DevMode Impresora: CyberClient
07/02/12 17:19:38
V
DevMode Copies: 1
07/02/12 17:19:38
F
lpszDevice: CyberClient
07/02/12 17:19:38
V
DevMode Impresora: CyberClient
07/02/12 17:19:38
V
DevMode Copies: 1
07/02/12 17:19:38
A
-> CreateDCWCallback
07/02/12 17:19:38
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:38
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:38
O
Impresora Final: CyberClient
07/02/12 17:19:38
V
DevMode Impresora: CyberClient
07/02/12 17:19:38
V
DevMode Copies: 1
07/02/12 17:19:38
F
lpszDevice: CyberClient
07/02/12 17:19:38
V
DevMode Impresora: CyberClient
07/02/12 17:19:38
V
DevMode Copies: 1
07/02/12 17:19:39
A
-> CreateDCWCallback
07/02/12 17:19:39
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:39
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:39
O
Impresora Final: CyberClient
07/02/12 17:19:39
V
DevMode Impresora: CyberClient
07/02/12 17:19:39
V
DevMode Copies: 1
07/02/12 17:19:39
F
lpszDevice: CyberClient
07/02/12 17:19:39
V
DevMode Impresora: CyberClient
07/02/12 17:19:39
V
DevMode Copies: 1
07/02/12 17:19:39
A
-> CreateDCWCallback
07/02/12 17:19:39
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:39
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:39
O
Impresora Final: CyberClient
07/02/12 17:19:39
V
DevMode Impresora: CyberClient
07/02/12 17:19:39
V
DevMode Copies: 1
07/02/12 17:19:39
F
lpszDevice: CyberClient
07/02/12 17:19:39
V
DevMode Impresora: CyberClient
07/02/12 17:19:39
V
DevMode Copies: 1
07/02/12 17:19:39
A
-> StartDocWCallback
07/02/12 17:19:39
N
DATOS EN PN ======================
07/02/12 17:19:39
N
Process: C:\Windows\Explorer.EXE
07/02/12 17:19:39
N
API: StartDocW
07/02/12 17:19:39
N
Copies: 1
07/02/12 17:19:39
N
Doc: 9 x 13 cm. (4)
07/02/12 17:19:39
N
Printer: CyberClient
07/02/12 17:19:39
N
Pages: 0
07/02/12 17:19:39
N
Params: 1702850726
07/02/12 17:19:39
F
VB: C:\Windows\Explorer.EXE|||StartDocW|||dc: 21
83204026; doc: "9 x 13 cm. (4)"|||CyberClient|||||||||
07/02/12 17:19:39
I
Sending IPC to: VentanaCyberClient1
07/02/12 17:19:39
I
Answer: 255
07/02/12 17:19:39
A
-> EndPageCallback
07/02/12 17:19:39
A
-> EndDocCallback
07/02/12 17:19:39
N
DATOS EN PN ======================
07/02/12 17:19:39
N
Process: C:\Windows\Explorer.EXE
07/02/12 17:19:39
N
API: EndDoc
07/02/12 17:19:39
N
Copies: 1
07/02/12 17:19:39
N
Doc: 9 x 13 cm. (4)
07/02/12 17:19:39
N
Printer: CyberClient
07/02/12 17:19:39
N
Pages: 1
07/02/12 17:19:39
N
Params: 1702850726
07/02/12 17:19:39
F
VB: C:\Windows\Explorer.EXE|||EndDoc|||dc: 21832
04026; doc: "9 x 13 cm. (4)"|||CyberClient|||2|||1|||1
07/02/12 17:19:39
I
Sending IPC to: VentanaCyberClient1
07/02/12 17:19:39
I
Answer: 255

07/02/12 17:19:39
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_ATTACH
07/02/12 17:19:40
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:40
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:40
O
Impresora Final: CyberClient
07/02/12 17:19:40
V
DevMode Impresora: CyberClient
07/02/12 17:19:40
V
DevMode Copies: 1
07/02/12 17:19:42
A
-> NtTerminateProcessCallback
07/02/12 17:19:42
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:19:45
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:45
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:45
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:45
O
Impresora Final: \\Ohle-00\EPSON B/N
07/02/12 17:19:45
V
DevMode Impresora: \\Ohle-00\EPSON B/N
07/02/12 17:19:45
V
DevMode Copies: 1
07/02/12 17:19:45
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:45
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:56
O
Impresora Final: \\Ohle-00\EPSON B/N
07/02/12 17:19:56
V
DevMode Impresora: ???5le-00\EPSON B/N
07/02/12 17:19:56
V
DevMode Copies: 1
07/02/12 17:19:59
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:59
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:59
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:59
O
Impresora Final: \\Ohle-00\EPSON B/N
07/02/12 17:19:59
V
DevMode Impresora: \\Ohle-00\EPSON B/N
07/02/12 17:19:59
V
DevMode Copies: 1
07/02/12 17:19:59
A
-> DocumentPropertiesWCallBack
07/02/12 17:19:59
A
-> DocumentPropertiesWCallBack
07/02/12 17:20:05
O
Impresora Final: \\Ohle-00\EPSON B/N
07/02/12 17:20:05
V
DevMode Impresora: \\Ohle-00\EPSON B/N
07/02/12 17:20:05
V
DevMode Copies: 1
07/02/12 17:20:10
A
-> StartDocWCallback
07/02/12 17:20:10
N
DATOS EN PN ======================
07/02/12 17:20:10
N
Process: C:\Program Files\CyberClient\cyberclien
t.exe
07/02/12 17:20:10
N
API: StartDocW
07/02/12 17:20:10
N
Copies: 1
07/02/12 17:20:10
N
Doc: Pc13 - 9 x 13 cm. (4)
07/02/12 17:20:10
N
Printer: \\Ohle-00\EPSON B/N
07/02/12 17:20:10
N
Pages: 0
07/02/12 17:20:10
N
Params: 1702850726
07/02/12 17:20:10
F
VB: C:\Program Files\CyberClient\cyberclient.exe
|||StartDocW|||dc: 203492561; doc: "Pc13 - 9 x 13 cm. (4)"|||\\Ohle-00\EPSON B/N
|||||||||
07/02/12 17:20:10
I
Sending IPC to: VentanaCyberClient1
07/02/12 17:20:10
I
** Impresion excluida no se envia IPC al cliente
07/02/12 17:20:11
A
-> EndPageCallback
07/02/12 17:20:11
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_ATTACH
07/02/12 17:20:11
A
-> EndDocCallback
07/02/12 17:20:11
N
DATOS EN PN ======================
07/02/12 17:20:11
N
Process: C:\Program Files\CyberClient\cyberclien
t.exe
07/02/12 17:20:11
N
API: EndDoc
07/02/12 17:20:11
N
Copies: 1
07/02/12 17:20:11
N
Doc: Pc13 - 9 x 13 cm. (4)
07/02/12 17:20:11
N
Printer: \\Ohle-00\EPSON B/N
07/02/12 17:20:11
N
Pages: 1
07/02/12 17:20:11
N
Params: 1702850726

07/02/12 17:20:11
F
VB: C:\Program Files\CyberClient\cyberclient.exe
|||EndDoc|||dc: 203492561; doc: "Pc13 - 9 x 13 cm. (4)"|||\\Ohle-00\EPSON B/N|||
29998|||1|||1
07/02/12 17:20:11
I
Sending IPC to: VentanaCyberClient1
07/02/12 17:20:11
I
** Impresion excluida no se envia IPC al cliente
07/02/12 17:20:11
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_ATTACH
07/02/12 17:20:11
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_ATTACH
07/02/12 17:20:11
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_ATTACH
07/02/12 17:20:11
A
-> NtTerminateProcessCallback
07/02/12 17:20:12
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:14
A
-> NtTerminateProcessCallback
07/02/12 17:20:14
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:25
A
-> NtTerminateProcessCallback
07/02/12 17:20:25
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:47
A
-> NtTerminateProcessCallback
07/02/12 17:20:47
R
Dejamos matar a MSNMSGR.EXE
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
07/02/12 17:20:50
D
Enter DllMain -> Handle: 1702625280 - Reason for
call: DLL_PROCESS_DETACH
20/02/12 10:37:48
D
Enter DllMain -> Handle: 1698627584 - Reason for
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
D
Enter DllMain -> Handle: 1698627584 - Reason for
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
D
Enter DllMain -> Handle: 1698627584 - Reason for
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
A
-> NtTerminateProcessCallback
20/02/12 10:37:48
R
Dejamos matar a VIGIA.EXE
20/02/12 10:37:48
A
-> NtTerminateProcessCallback
20/02/12 10:37:48
R
Dejamos matar a VIGIA.EXE

20/02/12 10:37:48
A
20/02/12 10:37:48
R
20/02/12 10:37:48
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
A
20/02/12 10:37:48
A
20/02/12 10:37:48
A
20/02/12 10:37:48
A
20/02/12 10:37:48
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:48
A
20/02/12 10:37:48
D
call: DLL_PROCESS_DETACH
20/02/12 10:37:48
A
20/02/12 10:37:48
D
call: DLL_PROCESS_DETACH
20/02/12 10:37:49
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:49
A
20/02/12 10:37:50
A
20/02/12 10:37:50
D
call: DLL_PROCESS_DETACH
20/02/12 10:37:51
A
20/02/12 10:37:51
F
20/02/12 10:37:51
A
20/02/12 10:37:51
F
20/02/12 10:37:53
A
20/02/12 10:37:53
D
call: DLL_PROCESS_DETACH
20/02/12 10:37:54
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:58
D
call: DLL_PROCESS_ATTACH
20/02/12 10:37:58
A
20/02/12 10:37:58
D
call: DLL_PROCESS_DETACH
20/02/12 10:38:02
D
call: DLL_PROCESS_ATTACH
20/02/12 10:38:02
D
call: DLL_PROCESS_ATTACH
20/02/12 10:38:03
A
20/02/12 10:38:03
D
call: DLL_PROCESS_DETACH
20/02/12 10:38:30
A
20/02/12 10:38:30
D
call: DLL_PROCESS_DETACH
20/02/12 10:38:57
A
20/02/12 10:38:57
D
call: DLL_PROCESS_DETACH
20/02/12 10:42:29
D
call: DLL_PROCESS_ATTACH
20/02/12 10:42:29
A
20/02/12 10:42:29
D
call: DLL_PROCESS_DETACH
20/02/12 10:42:29
D
call: DLL_PROCESS_ATTACH

-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for

20/02/12 10:42:29
D
call: DLL_PROCESS_ATTACH
20/02/12 10:42:29
A
20/02/12 10:42:29
D
call: DLL_PROCESS_DETACH
20/02/12 10:42:29
A
20/02/12 10:42:29
D
call: DLL_PROCESS_DETACH
20/02/12 10:42:29
D
call: DLL_PROCESS_ATTACH
20/02/12 10:42:29
D
call: DLL_PROCESS_ATTACH
20/02/12 10:42:32
A
20/02/12 10:42:32
A
20/02/12 10:42:35
A
20/02/12 10:42:35
A
20/02/12 10:42:35
D
call: DLL_PROCESS_DETACH
20/02/12 10:42:35
A
20/02/12 10:42:35
D
call: DLL_PROCESS_DETACH
20/02/12 10:43:55
A
20/02/12 10:43:55
D
call: DLL_PROCESS_DETACH
20/02/12 10:43:55
A
20/02/12 10:43:55
D
call: DLL_PROCESS_DETACH
20/02/12 10:44:02
A
20/02/12 10:44:02
D
call: DLL_PROCESS_DETACH
20/02/12 10:44:07
D
call: DLL_PROCESS_ATTACH
20/02/12 10:44:08
D
call: DLL_PROCESS_ATTACH
20/02/12 10:44:08
A
20/02/12 10:44:08
D
call: DLL_PROCESS_DETACH
20/02/12 10:44:10
A
20/02/12 10:44:10
A
20/02/12 10:44:10
R
20/02/12 10:44:10
A
20/02/12 10:44:10
R
20/02/12 10:44:10
A
20/02/12 10:44:10
R
20/02/12 10:44:10
D
call: DLL_PROCESS_ATTACH
20/02/12 10:44:10
D
call: DLL_PROCESS_ATTACH
20/02/12 10:44:10
A
20/02/12 10:44:10
A
20/02/12 10:44:10
A
20/02/12 10:44:10
A
20/02/12 10:44:10
D
call: DLL_PROCESS_ATTACH
20/02/12 10:44:10
D
call: DLL_PROCESS_ATTACH
20/02/12 10:44:10
A
20/02/12 10:44:10
D
call: DLL_PROCESS_DETACH
20/02/12 10:44:10
A

Enter DllMain -> Handle: 1698627584 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a
-> NtTerminateProcessCallback
Dejamos matar a
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback

20/02/12 10:44:10
D
call: DLL_PROCESS_DETACH
20/02/12 10:44:18
D
call: DLL_PROCESS_ATTACH
20/02/12 10:45:19
D
call: DLL_PROCESS_ATTACH
20/02/12 10:45:31
A
20/02/12 10:45:31
D
call: DLL_PROCESS_DETACH
20/02/12 10:45:36
A
20/02/12 10:45:36
D
call: DLL_PROCESS_DETACH
20/02/12 10:45:41
D
call: DLL_PROCESS_ATTACH
20/02/12 10:47:19
D
call: DLL_PROCESS_ATTACH
20/02/12 10:47:20
D
call: DLL_PROCESS_ATTACH
20/02/12 10:47:25
A
20/02/12 10:50:21
D
call: DLL_PROCESS_ATTACH
20/02/12 10:50:21
A
20/02/12 10:50:21
D
call: DLL_PROCESS_DETACH
20/02/12 10:52:20
A
20/02/12 10:52:20
D
call: DLL_PROCESS_DETACH
20/02/12 10:52:22
D
call: DLL_PROCESS_ATTACH
20/02/12 10:52:23
D
call: DLL_PROCESS_ATTACH
20/02/12 10:52:28
A
20/02/12 10:54:45
A
20/02/12 10:54:45
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:45
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:46
A
20/02/12 10:54:46
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
A
20/02/12 10:54:47
R
20/02/12 10:54:47
A
20/02/12 10:54:47
R
20/02/12 10:54:47
A
20/02/12 10:54:47
R
20/02/12 10:54:47
A
20/02/12 10:54:47
R
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1698627584 - Reason for


Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1698627584 - Reason for
-> NtTerminateProcessCallback
Dejamos matar a CYBERCLIENT.EXE
-> NtTerminateProcessCallback
Dejamos matar a CYBERCLIENT.EXE
-> NtTerminateProcessCallback
Dejamos matar a CYBERCLIENT.EXE
-> NtTerminateProcessCallback
Dejamos matar a CYBERCLIENT.EXE
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for

20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:47
D
call: DLL_PROCESS_DETACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:54:59
A
20/02/12 10:54:59
R
20/02/12 10:54:59
A
20/02/12 10:54:59
R
20/02/12 10:54:59
A
20/02/12 10:54:59
R
20/02/12 10:54:59
D
call: DLL_PROCESS_ATTACH
20/02/12 10:55:07
D
call: DLL_PROCESS_ATTACH
20/02/12 10:55:07
D
call: DLL_PROCESS_ATTACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1698627584 - Reason for


Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1698627584 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for

20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:55:14
D
call: DLL_PROCESS_DETACH
20/02/12 10:56:46
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:46
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:46
A
20/02/12 10:56:46
A
20/02/12 10:56:46
R
20/02/12 10:56:46
A
20/02/12 10:56:46
R
20/02/12 10:56:46
A
20/02/12 10:56:46
R
20/02/12 10:56:46
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:46
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:46
A
20/02/12 10:56:46
A
20/02/12 10:56:46
A
20/02/12 10:56:46
A
20/02/12 10:56:46
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:46
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:46
A
20/02/12 10:56:46
D
call: DLL_PROCESS_DETACH
20/02/12 10:56:46
A
20/02/12 10:56:46
D
call: DLL_PROCESS_DETACH
20/02/12 10:56:47
A
20/02/12 10:56:48
A
20/02/12 10:56:48
F
20/02/12 10:56:48
A
20/02/12 10:56:48
F
20/02/12 10:56:48
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:48
A
20/02/12 10:56:48
D
call: DLL_PROCESS_DETACH
20/02/12 10:56:49
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:49
A
20/02/12 10:56:49
D
call: DLL_PROCESS_DETACH
20/02/12 10:56:50
D
call: DLL_PROCESS_ATTACH
20/02/12 10:56:52
A
20/02/12 10:56:52
D
call: DLL_PROCESS_DETACH
20/02/12 10:56:54
D

Enter DllMain -> Handle: 1934688256 - Reason for


Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1934688256 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a
-> NtTerminateProcessCallback
Dejamos matar a
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for

call: DLL_PROCESS_ATTACH
20/02/12 10:56:54
D
call: DLL_PROCESS_ATTACH
20/02/12 10:57:27
A
20/02/12 10:57:27
D
call: DLL_PROCESS_DETACH
20/02/12 10:57:55
A
20/02/12 10:57:55
D
call: DLL_PROCESS_DETACH
20/02/12 11:09:18
D
call: DLL_PROCESS_ATTACH
20/02/12 11:09:18
A
20/02/12 11:09:18
D
call: DLL_PROCESS_DETACH
20/02/12 11:11:17
D
call: DLL_PROCESS_ATTACH
20/02/12 11:11:17
D
call: DLL_PROCESS_ATTACH
20/02/12 11:11:22
A
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:13:11
D
call: DLL_PROCESS_DETACH
20/02/12 11:14:37
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:37
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:38
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:38
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:38
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:39
A
20/02/12 11:14:39
A
20/02/12 11:14:39
D
call: DLL_PROCESS_DETACH
20/02/12 11:14:40
D

Enter DllMain -> Handle: 1720909824 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1720909824 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for

call: DLL_PROCESS_ATTACH
20/02/12 11:14:40
A
20/02/12 11:14:40
A
20/02/12 11:14:40
A
20/02/12 11:14:40
A
20/02/12 11:14:40
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:40
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:40
A
20/02/12 11:14:40
D
call: DLL_PROCESS_DETACH
20/02/12 11:14:40
A
20/02/12 11:14:40
D
call: DLL_PROCESS_DETACH
20/02/12 11:14:41
A
20/02/12 11:14:41
A
20/02/12 11:14:41
R
20/02/12 11:14:41
A
20/02/12 11:14:41
R
20/02/12 11:14:41
A
20/02/12 11:14:41
R
20/02/12 11:14:41
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:42
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:42
A
20/02/12 11:14:42
D
call: DLL_PROCESS_DETACH
20/02/12 11:14:43
A
20/02/12 11:14:43
A
20/02/12 11:14:43
F
20/02/12 11:14:43
A
20/02/12 11:14:43
F
20/02/12 11:14:43
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:45
A
20/02/12 11:14:45
D
call: DLL_PROCESS_DETACH
20/02/12 11:14:49
D
call: DLL_PROCESS_ATTACH
20/02/12 11:14:49
D
call: DLL_PROCESS_ATTACH
20/02/12 11:15:24
A
20/02/12 11:15:24
D
call: DLL_PROCESS_DETACH
20/02/12 11:15:49
A
20/02/12 11:15:49
D
call: DLL_PROCESS_DETACH
20/02/12 11:17:26
D
call: DLL_PROCESS_ATTACH
20/02/12 11:17:26
A
20/02/12 11:17:26
D
call: DLL_PROCESS_DETACH
20/02/12 11:20:53
A
20/02/12 11:20:53
D
call: DLL_PROCESS_DETACH
20/02/12 11:20:53
A
20/02/12 11:20:53
D
call: DLL_PROCESS_DETACH

-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a
-> NtTerminateProcessCallback
Dejamos matar a
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721761792 - Reason for

27/02/12 16:37:26
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:26
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:27
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:27
A
27/02/12 16:37:27
R
27/02/12 16:37:27
A
27/02/12 16:37:27
R
27/02/12 16:37:27
A
27/02/12 16:37:27
R
27/02/12 16:37:27
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:27
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:27
A
27/02/12 16:37:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:37:29
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:29
A
27/02/12 16:37:29
A
27/02/12 16:37:29
A
27/02/12 16:37:29
A
27/02/12 16:37:29
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:29
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:29
A
27/02/12 16:37:29
D
call: DLL_PROCESS_DETACH
27/02/12 16:37:29
A
27/02/12 16:37:29
D
call: DLL_PROCESS_DETACH
27/02/12 16:37:29
A
27/02/12 16:37:29
F
27/02/12 16:37:29
A
27/02/12 16:37:29
F
27/02/12 16:37:34
A
27/02/12 16:37:34
D
call: DLL_PROCESS_DETACH
27/02/12 16:37:37
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:37
D
call: DLL_PROCESS_ATTACH
27/02/12 16:37:37
A
27/02/12 16:37:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:08
A
27/02/12 16:38:08
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:08
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:08
A
27/02/12 16:38:08
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
A
27/02/12 16:38:09
R
27/02/12 16:38:09
D

Enter DllMain -> Handle: 1752891392 - Reason for


Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
-> NtTerminateProcessCallback
Dejamos matar a VIGIA.EXE
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1752891392 - Reason for
-> NtTerminateProcessCallback
Dejamos matar a CYBERCLIENT.EXE
Enter DllMain -> Handle: 1752891392 - Reason for

call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:09
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:10
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:23
A
27/02/12 16:38:23
D
call: DLL_PROCESS_ATTACH
27/02/12 16:38:36
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH
27/02/12 16:38:37
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1752891392 - Reason for


Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1752891392 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for
Enter DllMain -> Handle: 1911816192 - Reason for

27/02/12 16:40:09
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:09
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:09
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:10
A
27/02/12 16:40:10
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:10
A
27/02/12 16:40:10
D
call: DLL_PROCESS_DETACH
27/02/12 16:40:10
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
A
27/02/12 16:40:11
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
A
27/02/12 16:40:11
A
27/02/12 16:40:11
A
27/02/12 16:40:11
A
27/02/12 16:40:11
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
A
27/02/12 16:40:11
F
27/02/12 16:40:11
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
A
27/02/12 16:40:11
F
27/02/12 16:40:11
A
27/02/12 16:40:11
F
27/02/12 16:40:11
A
27/02/12 16:40:11
A
27/02/12 16:40:11
F
27/02/12 16:40:11
D
call: DLL_PROCESS_DETACH
27/02/12 16:40:11
A
27/02/12 16:40:11
D
call: DLL_PROCESS_DETACH
27/02/12 16:40:11
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
D
call: DLL_PROCESS_ATTACH
27/02/12 16:40:11
A
27/02/12 16:40:11
D
call: DLL_PROCESS_DETACH
27/02/12 16:40:12
A
27/02/12 16:40:12
D
call: DLL_PROCESS_DETACH
27/02/12 16:40:13
A
27/02/12 16:40:13
D
call: DLL_PROCESS_DETACH
27/02/12 16:40:50
A
27/02/12 16:40:50
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D

Enter DllMain -> Handle: 1729429504 - Reason for


Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1729429504 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1729429504 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
-> NtTerminateProcessCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for

call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:41:27
D
call: DLL_PROCESS_DETACH
27/02/12 16:42:55
D
call: DLL_PROCESS_ATTACH
27/02/12 16:42:55
D
call: DLL_PROCESS_ATTACH
27/02/12 16:42:55
D
call: DLL_PROCESS_ATTACH
27/02/12 16:42:56
D
call: DLL_PROCESS_ATTACH
27/02/12 16:42:57
A
27/02/12 16:42:59
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:00
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:00
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:00
A
27/02/12 16:43:00
A
27/02/12 16:43:00
A
27/02/12 16:43:00
A
27/02/12 16:43:00
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:00
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:00
A
27/02/12 16:43:00
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:00
A
27/02/12 16:43:00
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:00
A
27/02/12 16:43:00
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:00
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:01
D
call: DLL_PROCESS_ATTACH
27/02/12 16:43:01
A
27/02/12 16:43:01
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:01
A
27/02/12 16:43:01
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:03
A

Enter DllMain -> Handle: 1729429504 - Reason for


Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1729429504 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> CreateDCWCallback

27/02/12 16:43:03
F
27/02/12 16:43:03
A
27/02/12 16:43:03
F
27/02/12 16:43:05
A
27/02/12 16:43:05
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:42
A
27/02/12 16:43:42
D
call: DLL_PROCESS_DETACH
27/02/12 16:43:58
A
27/02/12 16:43:58
D
call: DLL_PROCESS_DETACH
27/02/12 16:45:26
A
27/02/12 16:45:26
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:28
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:28
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:28
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:28
A
05/03/12 11:45:28
F
05/03/12 11:45:28
A
05/03/12 11:45:28
F
05/03/12 11:45:28
A
05/03/12 11:45:28
F
05/03/12 11:45:30
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:30
A
05/03/12 11:45:30
A
05/03/12 11:45:30
A
05/03/12 11:45:30
A
05/03/12 11:45:30
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:33
A
05/03/12 11:45:33
F
05/03/12 11:45:33
A
05/03/12 11:45:33
F
05/03/12 11:45:38
A
05/03/12 11:45:38
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:40
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:40
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:41
A
05/03/12 11:45:41
A
05/03/12 11:45:41
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:41
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:41
A
05/03/12 11:45:41
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:41
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:41
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:41
A

lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1700397056 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback

05/03/12 11:45:41
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:41
A
05/03/12 11:45:41
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:41
A
05/03/12 11:45:41
D
call: DLL_PROCESS_DETACH
05/03/12 11:45:41
A
05/03/12 11:45:41
D
call: DLL_PROCESS_ATTACH
05/03/12 11:45:42
A
05/03/12 11:45:42
D
call: DLL_PROCESS_DETACH
05/03/12 11:46:12
A
05/03/12 11:46:12
D
call: DLL_PROCESS_DETACH
05/03/12 11:49:00
D
call: DLL_PROCESS_ATTACH
05/03/12 11:49:11
A
05/03/12 11:49:11
D
call: DLL_PROCESS_DETACH
05/03/12 11:49:37
A
05/03/12 11:49:37
D
call: DLL_PROCESS_DETACH
05/03/12 11:50:12
D
call: DLL_PROCESS_ATTACH
05/03/12 11:50:12
A
05/03/12 11:50:12
D
call: DLL_PROCESS_DETACH
05/03/12 11:50:12
D
call: DLL_PROCESS_ATTACH
05/03/12 11:50:12
D
call: DLL_PROCESS_ATTACH
05/03/12 11:50:12
D
call: DLL_PROCESS_ATTACH
05/03/12 11:50:12
A
05/03/12 11:50:12
D
call: DLL_PROCESS_DETACH
05/03/12 11:50:12
D
call: DLL_PROCESS_ATTACH
05/03/12 11:50:15
A
05/03/12 11:50:15
A
05/03/12 11:50:17
A
05/03/12 11:50:18
A
05/03/12 11:50:18
D
call: DLL_PROCESS_DETACH
05/03/12 11:50:18
A
05/03/12 11:50:18
D
call: DLL_PROCESS_DETACH
05/03/12 11:53:28
D
call: DLL_PROCESS_ATTACH
05/03/12 11:53:28
A
05/03/12 11:53:28
A
05/03/12 11:53:28
A
05/03/12 11:53:28
A
05/03/12 11:53:28
D
call: DLL_PROCESS_ATTACH
05/03/12 11:53:28
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1743257600 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for

05/03/12 11:53:28
A
05/03/12 11:53:28
D
call: DLL_PROCESS_DETACH
05/03/12 11:53:28
A
05/03/12 11:53:28
D
call: DLL_PROCESS_DETACH
05/03/12 11:54:03
D
call: DLL_PROCESS_ATTACH
05/03/12 11:54:03
A
05/03/12 11:54:03
A
05/03/12 11:54:03
A
05/03/12 11:54:03
A
05/03/12 11:54:03
D
call: DLL_PROCESS_ATTACH
05/03/12 11:54:03
D
call: DLL_PROCESS_ATTACH
05/03/12 11:54:03
A
05/03/12 11:54:03
D
call: DLL_PROCESS_DETACH
05/03/12 11:54:03
A
05/03/12 11:54:03
D
call: DLL_PROCESS_DETACH
05/03/12 11:55:02
D
call: DLL_PROCESS_ATTACH
05/03/12 11:55:02
D
call: DLL_PROCESS_ATTACH
05/03/12 11:55:07
A
05/03/12 11:58:03
D
call: DLL_PROCESS_ATTACH
05/03/12 11:58:03
A
05/03/12 11:58:03
D
call: DLL_PROCESS_DETACH
05/03/12 12:00:02
D
call: DLL_PROCESS_ATTACH
05/03/12 12:00:07
A
05/03/12 12:05:02
A
05/03/12 12:05:02
D
call: DLL_PROCESS_DETACH
05/03/12 12:08:16
D
call: DLL_PROCESS_ATTACH
05/03/12 12:08:17
D
call: DLL_PROCESS_ATTACH
05/03/12 12:08:17
A
05/03/12 12:08:17
A
05/03/12 12:08:17
A
05/03/12 12:08:17
D
call: DLL_PROCESS_ATTACH
05/03/12 12:08:21
A
05/03/12 12:08:21
F
05/03/12 12:08:21
A
05/03/12 12:08:21
F
05/03/12 12:08:21
A
05/03/12 12:08:21
F
05/03/12 12:08:21
A
05/03/12 12:08:21
F
05/03/12 12:08:21
A
05/03/12 12:08:21
F
05/03/12 12:08:27
A
05/03/12 12:08:27
F
05/03/12 12:08:27
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback

05/03/12 12:08:27
F
05/03/12 12:09:14
A
05/03/12 12:09:14
F
05/03/12 12:09:14
A
05/03/12 12:09:14
F
05/03/12 12:09:20
A
05/03/12 12:09:20
F
05/03/12 12:09:20
A
05/03/12 12:09:20
F
05/03/12 12:09:27
A
05/03/12 12:09:27
F
05/03/12 12:09:27
A
05/03/12 12:09:27
F
05/03/12 12:10:08
A
05/03/12 12:10:08
F
05/03/12 12:10:08
A
05/03/12 12:10:08
F
05/03/12 12:10:56
A
05/03/12 12:10:56
F
05/03/12 12:10:56
A
05/03/12 12:10:56
F
05/03/12 12:11:07
A
05/03/12 12:11:07
F
05/03/12 12:11:07
A
05/03/12 12:11:07
F
05/03/12 12:11:16
A
05/03/12 12:11:16
F
05/03/12 12:11:16
A
05/03/12 12:11:16
F
05/03/12 12:12:47
D
call: DLL_PROCESS_ATTACH
05/03/12 12:12:47
A
05/03/12 12:12:47
F
05/03/12 12:12:49
A
05/03/12 12:12:49
R
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D
call: DLL_PROCESS_DETACH
05/03/12 12:12:50
D

lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1743257600 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Dejamos matar a cyberclient.exe
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for
Enter DllMain -> Handle: 1743257600 - Reason for

call: DLL_PROCESS_DETACH
05/03/12 12:13:02
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:02
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:03
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:06
D
call: DLL_PROCESS_ATTACH
05/03/12 12:13:06
A
05/03/12 12:13:06
D
call: DLL_PROCESS_DETACH
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
D
call: DLL_PROCESS_DETACH
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
A
05/03/12 12:13:07
A
05/03/12 12:13:07
F
05/03/12 12:13:07
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1813446656 - Reason for


Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1813446656 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1813446656 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1813446656 - Reason for

05/03/12 12:15:39
D
call: DLL_PROCESS_ATTACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:17:36
D
call: DLL_PROCESS_DETACH
05/03/12 12:19:10
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:10
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:11
A
05/03/12 12:19:11
D
call: DLL_PROCESS_DETACH
05/03/12 12:19:11
A
05/03/12 12:19:11
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:12
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:12
A
05/03/12 12:19:12
D
call: DLL_PROCESS_DETACH
05/03/12 12:19:12
A
05/03/12 12:19:12
D
call: DLL_PROCESS_DETACH
05/03/12 12:19:12
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:12
A
05/03/12 12:19:12
A
05/03/12 12:19:12
D
call: DLL_PROCESS_DETACH
05/03/12 12:19:12
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:12
A
05/03/12 12:19:12
F
05/03/12 12:19:12
A
05/03/12 12:19:12
F
05/03/12 12:19:12
D
call: DLL_PROCESS_ATTACH
05/03/12 12:19:12
A
05/03/12 12:19:12
D
call: DLL_PROCESS_DETACH
05/03/12 12:19:17
A
05/03/12 12:19:17
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1813446656 - Reason for


Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1813446656 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for

05/03/12 12:19:52
A
05/03/12 12:19:52
D
call: DLL_PROCESS_DETACH
05/03/12 12:22:02
D
call: DLL_PROCESS_ATTACH
05/03/12 12:23:12
A
05/03/12 12:23:12
D
call: DLL_PROCESS_DETACH
05/03/12 12:23:51
D
call: DLL_PROCESS_ATTACH
05/03/12 12:23:51
D
call: DLL_PROCESS_ATTACH
05/03/12 12:23:52
A
05/03/12 12:23:52
D
call: DLL_PROCESS_DETACH
05/03/12 12:23:52
A
05/03/12 12:23:52
D
call: DLL_PROCESS_DETACH
05/03/12 12:29:39
D
call: DLL_PROCESS_ATTACH
05/03/12 12:29:39
A
05/03/12 12:29:39
D
call: DLL_PROCESS_DETACH
05/03/12 12:29:51
D
call: DLL_PROCESS_ATTACH
05/03/12 12:29:55
A
05/03/12 12:29:55
D
call: DLL_PROCESS_DETACH
15/03/12 11:48:06
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:06
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
A
15/03/12 11:48:07
A
15/03/12 11:48:07
A
15/03/12 11:48:07
A
15/03/12 11:48:07
A
15/03/12 11:48:07
D
call: DLL_PROCESS_DETACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
D
call: DLL_PROCESS_ATTACH
15/03/12 11:48:07
A
15/03/12 11:48:07
D
call: DLL_PROCESS_DETACH
15/03/12 11:48:07
A
15/03/12 11:48:07
D
call: DLL_PROCESS_DETACH
15/03/12 11:48:09
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1768488960 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1768488960 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> NtTerminateProcessCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback

15/03/12 11:48:09
D
call: DLL_PROCESS_DETACH
15/03/12 11:48:35
A
15/03/12 11:48:35
D
call: DLL_PROCESS_DETACH
15/03/12 11:51:05
D
call: DLL_PROCESS_ATTACH
15/03/12 11:52:06
A
15/03/12 11:52:06
D
call: DLL_PROCESS_DETACH
15/03/12 11:52:34
D
call: DLL_PROCESS_ATTACH
15/03/12 11:52:34
A
15/03/12 11:52:34
D
call: DLL_PROCESS_DETACH
15/03/12 11:55:54
A
15/03/12 11:55:54
D
call: DLL_PROCESS_DETACH
15/03/12 11:56:02
D
call: DLL_PROCESS_ATTACH
15/03/12 11:56:04
D
call: DLL_PROCESS_ATTACH
15/03/12 11:56:09
A
15/03/12 11:56:27
D
call: DLL_PROCESS_ATTACH
15/03/12 11:56:41
A
15/03/12 11:56:41
D
call: DLL_PROCESS_DETACH
15/03/12 11:57:28
D
call: DLL_PROCESS_ATTACH
15/03/12 11:57:29
D
call: DLL_PROCESS_ATTACH
15/03/12 11:57:34
A
15/03/12 12:00:03
D
call: DLL_PROCESS_ATTACH
15/03/12 12:00:08
A
15/03/12 12:00:31
D
call: DLL_PROCESS_ATTACH
15/03/12 12:00:31
A
15/03/12 12:00:31
D
call: DLL_PROCESS_DETACH
15/03/12 12:01:58
A
15/03/12 12:01:58
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:00
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:02
A
15/03/12 12:02:13
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:13
A
15/03/12 12:02:13
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1913913344 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
-> CreateDCWCallback
Enter DllMain -> Handle: 1913913344 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for

15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
ll: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
A
15/03/12 12:02:15
A
15/03/12 12:02:15
A
15/03/12 12:02:15
A
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:15
A
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:15
A
15/03/12 12:02:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:29
A
15/03/12 12:02:29
D
call: DLL_PROCESS_DETACH
15/03/12 12:02:31
D
call: DLL_PROCESS_ATTACH
15/03/12 12:02:32
D

Enter DllMain -> Handle: 1913913344 - Reason for


Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1913913344 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 5505024 - Reason for ca
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1643380736 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1643380736 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for

call: DLL_PROCESS_ATTACH
15/03/12 12:02:37
A
-> NtTerminateProcessCallback
15/03/12 12:02:38
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:38
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:38
O
Impresora Final: CyberClient
15/03/12 12:02:38
V
DevMode Impresora: CyberClient
15/03/12 12:02:38
V
DevMode Copies: 1
15/03/12 12:02:38
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:38
O
Impresora Final: CyberClient
15/03/12 12:02:38
V
DevMode Impresora: CyberClient
15/03/12 12:02:38
V
DevMode Copies: 1
15/03/12 12:02:38
A
-> CreateDCWCallback
15/03/12 12:02:38
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:38
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:38
O
Impresora Final: CyberClient
15/03/12 12:02:38
V
DevMode Impresora: CyberClient
15/03/12 12:02:38
V
DevMode Copies: 1
15/03/12 12:02:38
F
lpszDevice: CyberClient
15/03/12 12:02:38
V
DevMode Impresora: CyberClient
15/03/12 12:02:38
V
DevMode Copies: 1
15/03/12 12:02:39
A
-> CreateDCWCallback
15/03/12 12:02:39
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:39
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:39
O
Impresora Final: CyberClient
15/03/12 12:02:39
V
DevMode Impresora: CyberClient
15/03/12 12:02:39
V
DevMode Copies: 1
15/03/12 12:02:39
F
lpszDevice: CyberClient
15/03/12 12:02:39
V
DevMode Impresora: CyberClient
15/03/12 12:02:39
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
O
Impresora Final: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> CreateDCWCallback
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
O
Impresora Final: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
F
lpszDevice: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> StartDocWCallback
15/03/12 12:02:42
N
DATOS EN PN ======================
15/03/12 12:02:42
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
15/03/12 12:02:42
N
API: StartDocW
15/03/12 12:02:42
N
Copies: 1
15/03/12 12:02:42
N
Doc: Microsoft Word - Documento1
15/03/12 12:02:42
N
Printer: CyberClient
15/03/12 12:02:42
N
Pages: 0
15/03/12 12:02:42
N
Params: 1643606174
15/03/12 12:02:42
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 690031534; doc: "Microsoft Word - Documento1"|||Cyb
erClient|||||||||
15/03/12 12:02:42
I
Sending IPC to: VentanaCyberClient1
15/03/12 12:02:42
I
** Impresion NO excluida
15/03/12 12:02:42
I
Answer: 255
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
O
Impresora Final: CyberClient

15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> CreateDCWCallback
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
O
Impresora Final: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
F
lpszDevice: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
O
Impresora Final: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> ResetDCWCallback
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:42
O
Impresora Final: CyberClient
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
V
DevMode Impresora: CyberClient
15/03/12 12:02:42
V
DevMode Copies: 1
15/03/12 12:02:42
A
-> EndPageCallback
15/03/12 12:02:42
A
-> EndDocCallback
15/03/12 12:02:42
N
DATOS EN PN ======================
15/03/12 12:02:42
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
15/03/12 12:02:42
N
API: EndDoc
15/03/12 12:02:42
N
Copies: 1
15/03/12 12:02:42
N
Doc: Microsoft Word - Documento1
15/03/12 12:02:42
N
Printer: CyberClient
15/03/12 12:02:42
N
Pages: 1
15/03/12 12:02:42
N
Params: 1643606174
15/03/12 12:02:42
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 690031534; doc: "Microsoft Word - Documento1"|||CyberC
lient|||2|||1|||1
15/03/12 12:02:42
I
Sending IPC to: VentanaCyberClient1
15/03/12 12:02:42
I
** Impresion NO excluida
15/03/12 12:02:43
I
Answer: 255
15/03/12 12:02:51
A
-> CreateDCWCallback
15/03/12 12:02:51
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:51
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:51
O
Impresora Final: CyberClient
15/03/12 12:02:51
V
DevMode Impresora: CyberClient
15/03/12 12:02:51
V
DevMode Copies: 1
15/03/12 12:02:51
F
lpszDevice: CyberClient
15/03/12 12:02:51
V
DevMode Impresora: CyberClient
15/03/12 12:02:51
V
DevMode Copies: 1
15/03/12 12:02:51
A
-> CreateDCWCallback
15/03/12 12:02:51
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:51
A
-> DocumentPropertiesWCallBack
15/03/12 12:02:51
O
Impresora Final: CyberClient
15/03/12 12:02:51
V
DevMode Impresora: CyberClient
15/03/12 12:02:51
V
DevMode Copies: 1
15/03/12 12:02:51
F
lpszDevice: CyberClient
15/03/12 12:02:51
V
DevMode Impresora: CyberClient
15/03/12 12:02:51
V
DevMode Copies: 1
15/03/12 12:02:51
A
-> CreateDCWCallback
15/03/12 12:02:51
A
-> DocumentPropertiesWCallBack

15/03/12 12:02:51
A
15/03/12 12:02:51
O
15/03/12 12:02:51
V
15/03/12 12:02:51
V
15/03/12 12:02:51
F
15/03/12 12:02:51
V
15/03/12 12:02:51
V
15/03/12 12:03:15
A
15/03/12 12:03:15
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
ll: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
15/03/12 12:03:53
D
call: DLL_PROCESS_DETACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
A
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:30
A
26/03/12 13:55:30
D
call: DLL_PROCESS_DETACH
26/03/12 13:55:30
A
26/03/12 13:55:30
D
call: DLL_PROCESS_DETACH
26/03/12 13:55:30
A
26/03/12 13:55:30
D

-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 5505024 - Reason for ca
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1643380736 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for

call: DLL_PROCESS_DETACH
26/03/12 13:55:30
A
26/03/12 13:55:30
D
call: DLL_PROCESS_DETACH
26/03/12 13:55:30
D
call: DLL_PROCESS_ATTACH
26/03/12 13:55:40
A
26/03/12 13:55:40
D
call: DLL_PROCESS_DETACH
26/03/12 13:55:57
A
26/03/12 13:55:57
D
call: DLL_PROCESS_DETACH
26/03/12 13:58:45
D
call: DLL_PROCESS_ATTACH
26/03/12 13:59:15
A
26/03/12 13:59:15
D
call: DLL_PROCESS_DETACH
26/03/12 13:59:32
A
26/03/12 13:59:32
D
call: DLL_PROCESS_DETACH
26/03/12 13:59:55
D
call: DLL_PROCESS_ATTACH
26/03/12 13:59:56
D
call: DLL_PROCESS_ATTACH
26/03/12 13:59:58
A
26/03/12 13:59:58
A
26/03/12 14:00:01
A
26/03/12 14:00:01
A
26/03/12 14:00:01
D
call: DLL_PROCESS_DETACH
26/03/12 14:00:01
A
26/03/12 14:00:01
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:13
D
call: DLL_PROCESS_DETACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1851392000 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for

call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:02:28
A
26/03/12 14:02:28
D
call: DLL_PROCESS_ATTACH
26/03/12 14:04:47
D
call: DLL_PROCESS_ATTACH
26/03/12 14:04:48
D
call: DLL_PROCESS_ATTACH
26/03/12 14:04:53
A
26/03/12 14:05:00
A
26/03/12 14:05:00
D
call: DLL_PROCESS_DETACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:14
A
17/04/12 12:01:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:15
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:15
A
17/04/12 12:01:15
D
call: DLL_PROCESS_DETACH
17/04/12 12:01:20
A
17/04/12 12:01:20
F

Enter DllMain -> Handle: 1943076864 - Reason for


Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1943076864 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1943076864 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1

17/04/12 12:01:20
A
17/04/12 12:01:20
F
17/04/12 12:01:22
A
17/04/12 12:01:22
D
call: DLL_PROCESS_DETACH
17/04/12 12:01:31
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:31
A
17/04/12 12:01:31
A
17/04/12 12:01:31
A
17/04/12 12:01:31
A
17/04/12 12:01:31
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:31
D
call: DLL_PROCESS_ATTACH
17/04/12 12:01:31
A
17/04/12 12:01:31
D
call: DLL_PROCESS_DETACH
17/04/12 12:01:31
A
17/04/12 12:01:31
D
call: DLL_PROCESS_DETACH
17/04/12 12:01:58
A
17/04/12 12:01:58
D
call: DLL_PROCESS_DETACH
17/04/12 12:03:48
D
call: DLL_PROCESS_ATTACH
17/04/12 12:04:06
A
17/04/12 12:04:06
D
call: DLL_PROCESS_DETACH
17/04/12 12:04:12
D
call: DLL_PROCESS_ATTACH
17/04/12 12:05:22
A
17/04/12 12:05:22
D
call: DLL_PROCESS_DETACH
17/04/12 12:05:56
D
call: DLL_PROCESS_ATTACH
17/04/12 12:05:57
A
17/04/12 12:05:57
D
call: DLL_PROCESS_DETACH
17/04/12 12:05:57
D
call: DLL_PROCESS_ATTACH
17/04/12 12:05:57
D
call: DLL_PROCESS_ATTACH
17/04/12 12:05:57
A
17/04/12 12:05:57
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH

-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for

17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:27
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:42
A
17/04/12 12:09:42
D
call: DLL_PROCESS_ATTACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D
call: DLL_PROCESS_DETACH
17/04/12 12:09:49
D

Enter DllMain -> Handle: 1725825024 - Reason for


Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1725825024 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for
Enter DllMain -> Handle: 1919877120 - Reason for

call: DLL_PROCESS_DETACH
17/04/12 12:11:21
D
call: DLL_PROCESS_ATTACH
17/04/12 12:11:21
D
call: DLL_PROCESS_ATTACH
17/04/12 12:11:21
D
call: DLL_PROCESS_ATTACH
17/04/12 12:11:21
A
17/04/12 12:11:21
F
17/04/12 12:11:21
A
17/04/12 12:11:21
F
17/04/12 12:11:22
D
call: DLL_PROCESS_ATTACH
17/04/12 12:11:22
A
17/04/12 12:11:22
D
call: DLL_PROCESS_DETACH
17/04/12 12:11:23
A
17/04/12 12:11:23
D
call: DLL_PROCESS_DETACH
17/04/12 12:11:23
D
call: DLL_PROCESS_DETACH
17/04/12 12:11:23
A
17/04/12 12:11:23
D
call: DLL_PROCESS_DETACH
17/04/12 12:12:01
A
17/04/12 12:12:01
D
call: DLL_PROCESS_DETACH
17/04/12 12:14:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:15:25
A
17/04/12 12:15:25
D
call: DLL_PROCESS_DETACH
17/04/12 12:15:58
D
call: DLL_PROCESS_ATTACH
17/04/12 12:15:58
D
call: DLL_PROCESS_ATTACH
17/04/12 12:15:58
A
17/04/12 12:15:58
D
call: DLL_PROCESS_DETACH
17/04/12 12:15:59
A
17/04/12 12:15:59
D
call: DLL_PROCESS_DETACH
17/04/12 12:18:51
D
call: DLL_PROCESS_ATTACH
17/04/12 12:19:15
D
call: DLL_PROCESS_ATTACH
17/04/12 12:19:15
A
17/04/12 12:19:15
D
call: DLL_PROCESS_DETACH
17/04/12 12:19:20
A
17/04/12 12:20:50
D
call: DLL_PROCESS_ATTACH
17/04/12 12:20:50
D
call: DLL_PROCESS_ATTACH
17/04/12 12:20:56
A
17/04/12 12:21:16
A
17/04/12 12:21:16
D
call: DLL_PROCESS_DETACH
17/04/12 12:21:19
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1711341568 - Reason for


Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for

17/04/12 12:21:33
D
call: DLL_PROCESS_ATTACH
17/04/12 12:21:47
A
17/04/12 12:22:13
A
17/04/12 12:22:13
R
17/04/12 12:22:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:22:19
A
17/04/12 12:22:19
D
call: DLL_PROCESS_DETACH
17/04/12 12:23:00
D
call: DLL_PROCESS_ATTACH
17/04/12 12:23:33
D
call: DLL_PROCESS_ATTACH
17/04/12 12:23:38
A
17/04/12 12:23:51
D
call: DLL_PROCESS_ATTACH
17/04/12 12:23:51
A
17/04/12 12:23:51
D
call: DLL_PROCESS_DETACH
17/04/12 12:23:58
A
17/04/12 12:23:58
D
call: DLL_PROCESS_DETACH
17/04/12 12:24:43
D
call: DLL_PROCESS_ATTACH
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:43
D
call: DLL_PROCESS_ATTACH
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:43
A
17/04/12 12:24:43
F
17/04/12 12:24:44
A
17/04/12 12:24:44
D
call: DLL_PROCESS_DETACH
17/04/12 12:24:50
A
17/04/12 12:24:50
D
call: DLL_PROCESS_DETACH
17/04/12 12:25:04
D
call: DLL_PROCESS_ATTACH
17/04/12 12:25:19
D
call: DLL_PROCESS_ATTACH
17/04/12 12:25:29
A
17/04/12 12:25:29
D
call: DLL_PROCESS_DETACH
17/04/12 12:25:51
A
17/04/12 12:25:51
D
call: DLL_PROCESS_DETACH
17/04/12 12:26:51
A
17/04/12 12:26:51
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1711341568 - Reason for


-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
La victima es msnmsgr.exe Asesino wlsetup.exe
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1711341568 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for

17/04/12 12:26:51
D
call: DLL_PROCESS_ATTACH
17/04/12 12:26:56
A
17/04/12 12:26:56
D
call: DLL_PROCESS_DETACH
17/04/12 12:27:09
D
call: DLL_PROCESS_ATTACH
17/04/12 12:27:14
D
call: DLL_PROCESS_ATTACH
17/04/12 12:27:14
A
17/04/12 12:27:14
F
17/04/12 12:27:14
A
17/04/12 12:27:14
F
17/04/12 12:27:14
A
17/04/12 12:27:14
F
17/04/12 12:27:14
A
17/04/12 12:27:14
F
17/04/12 12:27:14
A
17/04/12 12:27:14
F
17/04/12 12:27:14
A
19/08/12 18:23:51
D
call: DLL_PROCESS_ATTACH
19/08/12 18:23:51
D
call: DLL_PROCESS_ATTACH
19/08/12 18:23:51
A
19/08/12 18:23:51
D
call: DLL_PROCESS_ATTACH
19/08/12 18:23:51
D
call: DLL_PROCESS_ATTACH
19/08/12 18:23:51
A
19/08/12 18:23:51
A
19/08/12 18:23:51
A
19/08/12 18:23:51
A
19/08/12 18:23:51
D
call: DLL_PROCESS_ATTACH
19/08/12 18:23:51
D
call: DLL_PROCESS_ATTACH
19/08/12 18:23:51
A
19/08/12 18:23:51
D
call: DLL_PROCESS_DETACH
19/08/12 18:23:51
A
19/08/12 18:23:51
D
call: DLL_PROCESS_DETACH
19/08/12 18:24:26
A
19/08/12 18:24:26
D
call: DLL_PROCESS_DETACH
19/08/12 18:26:07
D
call: DLL_PROCESS_ATTACH
19/08/12 18:26:16
A
19/08/12 18:26:16
D
call: DLL_PROCESS_DETACH
19/08/12 18:27:50
A
19/08/12 18:27:50
D
call: DLL_PROCESS_DETACH
19/08/12 18:28:19
D
call: DLL_PROCESS_ATTACH
19/08/12 18:28:20
A
19/08/12 18:28:20
D
call: DLL_PROCESS_DETACH
19/08/12 18:28:20
D

Enter DllMain -> Handle: 1711341568 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
Enter DllMain -> Handle: 1711341568 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for

call: DLL_PROCESS_ATTACH
19/08/12 18:28:20
D
call: DLL_PROCESS_ATTACH
19/08/12 18:28:20
D
call: DLL_PROCESS_ATTACH
19/08/12 18:28:20
A
19/08/12 18:28:20
D
call: DLL_PROCESS_DETACH
19/08/12 18:28:20
D
call: DLL_PROCESS_ATTACH
19/08/12 18:28:23
A
19/08/12 18:28:23
A
19/08/12 18:28:25
A
19/08/12 18:28:26
A
19/08/12 18:28:26
D
call: DLL_PROCESS_DETACH
19/08/12 18:28:26
A
19/08/12 18:28:26
D
call: DLL_PROCESS_DETACH
19/08/12 18:33:10
D
call: DLL_PROCESS_ATTACH
19/08/12 18:33:11
D
call: DLL_PROCESS_ATTACH
19/08/12 18:33:16
A
19/08/12 18:35:38
D
call: DLL_PROCESS_ATTACH
19/08/12 18:35:38
A
19/08/12 18:35:38
D
call: DLL_PROCESS_DETACH
19/08/12 18:35:43
A
19/08/12 18:35:43
D
call: DLL_PROCESS_DETACH
19/08/12 18:35:48
D
call: DLL_PROCESS_ATTACH
19/08/12 18:36:10
D
call: DLL_PROCESS_ATTACH
19/08/12 18:36:10
A
19/08/12 18:36:10
D
call: DLL_PROCESS_DETACH
19/08/12 18:37:07
D
call: DLL_PROCESS_ATTACH
19/08/12 18:37:34
D
call: DLL_PROCESS_ATTACH
19/08/12 18:37:36
A
19/08/12 18:38:10
D
call: DLL_PROCESS_ATTACH
19/08/12 18:38:13
D
call: DLL_PROCESS_ATTACH
19/08/12 18:38:15
A
19/08/12 18:38:58
A
19/08/12 18:38:58
F
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
O
19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
O

Enter DllMain -> Handle: 1721827328 - Reason for


Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> CreateDCWCallback
Enter DllMain -> Handle: 1721827328 - Reason for
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient

19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:39:08
F
19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
O
19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:39:08
F
19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
A
19/08/12 18:39:08
O
19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:39:08
F
19/08/12 18:39:08
V
19/08/12 18:39:08
V
19/08/12 18:41:55
D
call: DLL_PROCESS_ATTACH
19/08/12 18:42:05
A
19/08/12 18:42:08
D
call: DLL_PROCESS_ATTACH
19/08/12 18:42:13
A
19/08/12 18:42:16
D
call: DLL_PROCESS_ATTACH
19/08/12 18:42:26
A

DevMode Impresora: CyberClient


DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1721827328 - Reason for
-> NtTerminateProcessCallback

Anda mungkin juga menyukai