You have clicked on "SUPERAntiSpyware Application" that belongs to "SUPERAntiSpyware" made by "SUPERAntiSpyware.com" Measures you can take regarding this program: Click this button to terminate the program. The program will be stopped and the system tray icon will disappear. Click this button to uninstall the program. The program will be removed from your computer following the proper uninstallation procedure. Click this button to remove this program from startup, so it will NOT get started every time you turn on your computer. Description extracted from Wikipedia:   Click here for more tehnical info Developer SUPERAdBlocker.com Latest stable release 4.42.1000 Operating system Microsoft Windows Type Antispyware, Malware removal, Internet Security License Proprietary (freeware and commercial) Website http://www.superantispyware.com }} SUPERAntiSpyware is a software application distributed as shareware which can detect and remove spyware, adware, Trojan Horses, rogue security software, computer worms, rootkits, parasites and other potentially harmful software applications. Although it can detect malware, it is not designed to replace an antivirus software. SUPERAntiSpyware is updated several times a week, normally daily or every 2–3 days. SUPERAntiSpyware generally receives a build update every 2–3 months. It is specifically designed to be compatible with other security applications, and therefore can be used with Real-Time protection on even with other applications which are often incompatible with anti-spyware products, such as Kaspersky. It uses only around 500 KB of RAM when idle, while protecting. BootSafe, a program that facilitates booting into Safe Mode, is included. A stripped-down version named SUPERAntiSpyware Personal Edition is also available in SUPERAdBlocker, an ad-blocking product from the same developers as SUPERAntiSpyware. Technical information: Click here for description Icon status Visible Icon setting Always shown Executable file P:\SUPERAntiSpyware\SUPERANTISPYWARE.EXE Version 4, 34, 0, 1000 Can be uninstalled Yes Autorun Started form registry Key HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Value SUPERAntiSpyware Encrypted No Size on disk 1.9 Mb Minimum recorded memory usage 58.9 Mb Average recorded memory usage 58.9 Mb Maximum recorded memory usage 58.9 Mb Date when maximum memory usage occured 2010-02-19 15:11:32 Minimum recorded CPU usage 0% Average recorded CPU usage 0% Maximum recorded CPU usage 0% Date when maximum CPU usage occured 2010-02-19 15:11:32 Started at 2010-02-19 15:11:29 Total CPU time 2 seconds Imported functions [+] Imported from KERNEL32.dll [-] Imported from KERNEL32.dll FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindClose GetFileSize SetFilePointer DeleteFileA DeleteFileW CopyFileA CopyFileW CreateDirectoryW GetFileAttributesA GetFileAttributesW SetFileAttributesA SetFileAttributesW MoveFileExA MoveFileExW GetFileTime GetShortPathNameA GetShortPathNameW GetOverlappedResult RemoveDirectoryA RemoveDirectoryW BackupRead BackupSeek CreateEventA CreateEventW OpenProcess TerminateProcess CreateToolhelp32Snapshot Toolhelp32ReadProcessMemory Module32First Module32FirstW Module32Next Module32NextW Process32First Process32FirstW Process32Next Process32NextW GetVersionExA lstrlenW GetProcessHeap MultiByteToWideChar TlsAlloc SetNamedPipeHandleState WaitNamedPipeA GetSystemTime SetLastError TlsSetValue TlsGetValue SearchPathA GetWindowsDirectoryA VirtualAlloc VirtualFree VirtualProtect QueryPerformanceCounter InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection QueryPerformanceFrequency TlsFree OutputDebugStringA WaitForSingleObject FileTimeToSystemTime FileTimeToLocalFileTime DosDateTimeToFileTime GetDiskFreeSpaceExA MoveFileA GetTempFileNameA SetEndOfFile SetFileTime IsBadReadPtr GetVolumeInformationA GetModuleHandleA MapViewOfFile CreateFileMappingA UnmapViewOfFile VirtualQuery GetDiskFreeSpaceA GetSystemDirectoryA GetDriveTypeA GetCommandLineA MulDiv SetProcessAffinityMask CreateFileW CreateThread SystemTimeToFileTime ResetEvent WriteFile OpenEventA SetUnhandledExceptionFilter GetSystemDefaultLangID GetComputerNameA VerLanguageNameA CompareFileTime SetEvent GetLogicalDriveStringsA CallNamedPipeA GetLocaleInfoA LocalFileTimeToFileTime GetCurrentDirectoryA GetFileInformationByHandle LoadLibraryA GetCurrentThreadId GetCurrentThread VirtualLock FindResourceA LoadResource LockResource FreeResource VirtualUnlock SetCurrentDirectoryA SetVolumeLabelA CreateProcessA IsBadStringPtrA FileTimeToDosDateTime GlobalSize GlobalReAlloc IsDBCSLeadByte lstrcmpA GlobalLock GlobalAlloc GlobalHandle GlobalUnlock GlobalFree SetEnvironmentVariableA CompareStringW CompareStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetTimeZoneInformation GetConsoleMode GetConsoleCP HeapReAlloc GetStdHandle LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP GetCPInfo ExitProcess HeapSize InterlockedDecrement InterlockedIncrement GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter GetStartupInfoA GetSystemTimeAsFileTime RtlUnwind RaiseException InterlockedExchange LocalFree LocalAlloc CloseHandle WideCharToMultiByte HeapAlloc lstrcpynA GetTempPathA CreateDirectoryA GlobalMemoryStatus ReadFile ExpandEnvironmentStringsA HeapFree GetProcAddress FreeLibrary lstrlenA GetModuleFileNameA lstrcpyA lstrcatA GetTickCount Sleep GetCurrentProcessId DeviceIoControl GetFullPathNameA GetLastError CreateFileA GetCurrentProcess GetLocalTime lstrcmpiA HeapDestroy GetProcessAffinityMask HeapCreate [+] Imported from USER32.dll [-] Imported from USER32.dll GetClientRect CreateWindowExA GetWindowRect CharUpperBuffA CharPrevA CharNextA OemToCharA CharUpperA GetActiveWindow GetWindowThreadProcessId WaitForInputIdle CharLowerA OemToCharBuffA CharToOemA SendMessageA ShowWindow DestroyWindow IsDialogMessageA TranslateAcceleratorA GetFocus GetNextDlgTabItem GetMessageA LoadAcceleratorsA GetAsyncKeyState FindWindowA EnableWindow SendMessageTimeoutA SetWindowTextA SetActiveWindow BringWindowToTop GetForegroundWindow IsIconic SendDlgItemMessageA IsWindowVisible IsWindow GetDlgItem CreateDialogParamA PostMessageA GetSystemMetrics ExitWindowsEx wsprintfA DispatchMessageA DestroyAcceleratorTable SetWindowsHookExA GetSysColor FillRect DrawIconEx FrameRect PostQuitMessage GetMenuItemCount TranslateMessage PeekMessageA MessageBoxA LoadImageA MoveWindow ScreenToClient EndPaint DrawTextA DrawEdge BeginPaint CallWindowProcA SetCursor LoadCursorA GetWindowTextA GetWindowLongA SetWindowLongA GetClassNameA EnumChildWindows GetMenuItemInfoA GetMenuStringA SetMenuItemInfoA LoadMenuA GetSubMenu CheckMenuItem DeleteMenu TrackPopupMenu DestroyMenu CallNextHookEx SetDlgItemInt EnumWindows RegisterWindowMessageA GetCursorPos GetDesktopWindow SetRect GetClassInfoA LoadIconA CopyRect SystemParametersInfoA GetDC ReleaseDC RegisterClassA InvalidateRect UpdateWindow DefWindowProcA CheckDlgButton IsDlgButtonChecked KillTimer SetTimer DialogBoxParamA EndDialog LoadStringA SetFocus GetDlgItemTextA SetDlgItemTextA GetParent SetForegroundWindow SetWindowPos FindWindowExA [+] Imported from GDI32.dll [-] Imported from GDI32.dll SetBkMode DeleteDC BitBlt GetObjectA CreateCompatibleDC SelectObject CreateSolidBrush SetBkColor GetTextExtentPoint32A GetStockObject SetTextColor DeleteObject SetGraphicsMode ModifyWorldTransform SetViewportOrgEx SetWindowOrgEx GetBkColor ExtTextOutA GetDeviceCaps CreateFontIndirectA [+] Imported from SHELL32.dll [-] Imported from SHELL32.dll SHGetPathFromIDListA SHBrowseForFolderA Shell_NotifyIconA ShellExecuteA ShellExecuteExA SHFileOperationA SHGetSpecialFolderLocation SHGetMalloc [+] Imported from ole32.dll [-] Imported from ole32.dll StgCreateDocfile StgCreateStorageEx StgIsStorageFile OleUninitialize CoTaskMemFree StgOpenStorage StgOpenStorageEx CoInitializeSecurity CoSetProxyBlanket OleInitialize CoInitialize CoUninitialize CoCreateInstance CoCreateGuid StringFromGUID2 CoInitializeEx [+] Imported from OLEAUT32.dll [-] Imported from OLEAUT32.dll Imported by ordinals: 2,4,6,7,8,9,10,12,149,313 [+] Imported from SHLWAPI.dll [-] Imported from SHLWAPI.dll PathGetDriveNumberA PathRemoveBackslashA PathFindNextComponentA StrChrA PathRemoveExtensionA StrStrA PathQuoteSpacesA PathRemoveArgsA PathUnquoteSpacesA StrCmpNIA PathRemoveBlanksA PathGetArgsA StrCpyW PathFindFileNameA SHCopyKeyW SHCopyKeyA SHDeleteValueW SHDeleteValueA SHDeleteKeyW SHDeleteKeyA PathStripToRootA PathIsFileSpecA PathIsNetworkPathA UrlUnescapeA StrCmpNA PathAddExtensionA PathSetDlgItemPathA StrRChrA PathFindExtensionA PathRemoveFileSpecA StrStrIA PathAppendA PathAddBackslashA PathFileExistsA PathFileExistsW PathIsDirectoryA PathIsDirectoryW SHGetValueA SHGetValueW SHSetValueA SHSetValueW [+] Imported from WINMM.dll [-] Imported from WINMM.dll timeGetTime PlaySoundA [+] Imported from VERSION.dll [-] Imported from VERSION.dll GetFileVersionInfoSizeA GetFileVersionInfoSizeW GetFileVersionInfoA GetFileVersionInfoW VerQueryValueA [+] Imported from IPHLPAPI.DLL [-] Imported from IPHLPAPI.DLL GetAdaptersInfo [+] Imported from COMCTL32.dll [-] Imported from COMCTL32.dll InitCommonControlsEx ImageList_Create ImageList_ReplaceIcon PropertySheetA CreatePropertySheetPageA [+] Imported from WININET.dll [-] Imported from WININET.dll FindNextUrlCacheEntryA FindCloseUrlCache DeleteUrlCacheEntry InternetCrackUrlA HttpSendRequestW HttpSendRequestA HttpOpenRequestW HttpOpenRequestA InternetConnectW InternetConnectA InternetOpenW InternetOpenA InternetCloseHandle FindFirstUrlCacheEntryA InternetReadFile InternetOpenUrlA InternetGetCookieA [+] Imported from WS2_32.dll [-] Imported from WS2_32.dll WSCInstallProvider [+] Imported from COMDLG32.dll [-] Imported from COMDLG32.dll GetSaveFileNameA Some relevant texts from the exe file [+] Click here for more details [-] Click here to hide details http://ocsp.thawte.com0 -http://crl.thawte.com/ThawteCodeSigningCA.crl0 /http://crl.thawte.com/ThawtePremiumServerCA.crl0 www.fileresearchcenter.com http://www.superantispyware.com/purchase.html?tag= http://www.superantispyware.com/donation.html?tag= www.superadblocker.com http://www.superadblocker.com http://www.superantispyware.com www.superantispyware.com !This program cannot be run in DOS mode. std=.htat]=.bintV=.dattO bad allocation Command Line Software\Microsoft\Windows\CurrentVersion\RunOnce Software\Microsoft\Windows\CurrentVersion\Run Software\Microsoft\Internet Explorer\Extensions Software\Microsoft\Internet Explorer\Explorer Bars Software\Microsoft\Internet Explorer\Toolbar SeDebugPrivilege SASENUM.SYS \\.\SASEnum CSABSDKFunctions::CInterface() - Leave CSABSDKFunctions::CInterface() - Enter ~CSABSDKFunctions::CInterface() - Leave ~CSABSDKFunctions::CInterface() - Enter CSABSDKFunctions() - Leave CSABSDKFunctions() - Enter CSIDL_PROFILE CSIDL_TEMPLATES CSIDL_STARTUP CSIDL_STARTMENU CSIDL_SENDTO CSIDL_PROGRAMS CSIDL_PROGRAM_FILES_COMMONX86 CSIDL_PROGRAM_FILES_COMMON CSIDL_PROGRAM_FILESX86 CSIDL_PROGRAM_FILES CSIDL_PERSONAL CSIDL_LOCAL_APPDATA CSIDL_INTERNET_CACHE CSIDL_FAVORITES CSIDL_DESKTOPDIRECTORY CSIDL_DESKTOP CSIDL_COOKIES CSIDL_COMMON_TEMPLATES CSIDL_COMMON_STARTUP CSIDL_COMMON_STARTMENU CSIDL_COMMON_PROGRAMS CSIDL_COMMON_FAVORITES CSIDL_COMMON_DOCUMENTS CSIDL_COMMON_DESKTOPDIRECTORY CSIDL_COMMON_APPDATA CSIDL_COMMON_ALTSTARTUP CSIDL_BITBUCKET CSIDL_ALTSTARTUP PROCESSLIST.BIN PROCESSLIST.DB Windows Server 2008 Windows Vista Windows Server 2008 RC2 Windows 2003 Server Family RC2 Windows 2003 Server Family Windows Home Server Windows ME CryptCATAdminCalcHashFromFileHandle CryptCATAdminEnumCatalogFromHash CryptCATAdminAcquireContext CryptCATAdminReleaseContext CProcessListManager::LoadList - Leave CProcessListManager::LoadList - Enter DLGDEFINITIONUPDATES SUPERADBLOCKER CProcessListManager::GetVersionFromServer - Leave CProcessListManager::GetVersionFromServer - Enter EnumProcessModules EnumProcesses GetModuleFileNameExW GetModuleFileNameExA \\.\SASKUTIL CSABSDKFunctions::CSABSDKFunctions() - Leave CSABSDKFunctions::CSABSDKFunctions() - Enter ~CSABSDKFunctions::CSABSDKFunctions() - Leave ~CSABSDKFunctions::CSABSDKFunctions() - Enter CSABSDKFunctions::CKUTILSInterface() - Leave CSABSDKFunctions::AuthenticateProcessWithDriver() CSABSDKFunctions::Start() CSABSDKFunctions::new CSABKUTILSService CSABSDKFunctions::GetVersionEx() CSABSDKFunctions::CKUTILSInterface() - Enter ~CSABSDKFunctions::CKUTILSInterface() - Leave ~CSABSDKFunctions::CKUTILSInterface() - Enter \REGISTRY\MACHINE\SOFTWARE\CLASSES\ \REGISTRY\USER\ \REGISTRY\MACHINE\ kernel32.dll WINTRUST.DLL PROCESSLIST.ZIP InprocServer32 CLSIDRestoreList Software\SUPERAntiSpyware.com\SUPERAntiSpyware [SASInprocServer32] GetCommandLineA CPLM::SRS - Leave - Success CPLM::SRS - Failed To Allocate Buffer - %x CPLM::ValidateRuleSetParsing - 2 CPLM::ValidateRuleSetParsing - 1 CSABSDKFunctions::CCoreService() - Leave CSABSDKFunctions::CCoreService() - Enter ~CSABCoreService() ~CSABSDKFunctions::CCoreService() - Leave ~CSABSDKFunctions::CCoreService() - Enter CreateInterface - Leave - Failure CreateInterface( %x ) - Enter CProcessListManager::Initialize - Leave SUPERAntiSpyware.com SUPERAntiSpyware CProcessListManager::Initialize - Enter No Base64 Data FAILED TO SAVE DLL GetEnumeratedRegistryItems EnumerateRegistryItems RemoveThreat IsObjectRecognized GetDetectedMemoryItems DetectMemoryItems Failed To Allocate DLL Memory Failed To Base64 Decode Failed To Create File IMAGEDATADIRECTORYCOMSize IMAGEDATADIRECTORYCOMAddress IMAGEDATADIRECTORYDelayImportSize IMAGEDATADIRECTORYDelayImportAddress IMAGEDATADIRECTORYIATSize IMAGEDATADIRECTORYIATAddress IMAGEDATADIRECTORYBoundImportSize IMAGEDATADIRECTORYBoundImportAddress IMAGEDATADIRECTORYLoadConfigSize IMAGEDATADIRECTORYLoadConfigAddress IMAGEDATADIRECTORYTLSSize IMAGEDATADIRECTORYTLSAddress IMAGEDATADIRECTORYGlobalPtrSize IMAGEDATADIRECTORYGlobalPtrAddress IMAGEDATADIRECTORYArchitectureSize IMAGEDATADIRECTORYArchitectureAddress IMAGEDATADIRECTORYDebugSize IMAGEDATADIRECTORYDebugAddress IMAGEDATADIRECTORYBaseRelocSize IMAGEDATADIRECTORYBaseRelocAddress IMAGEDATADIRECTORYSecuritySize IMAGEDATADIRECTORYSecurityAddress IMAGEDATADIRECTORYExceptionSize IMAGEDATADIRECTORYExceptionAddress IMAGEDATADIRECTORYResourceSize IMAGEDATADIRECTORYResourceAddress IMAGEDATADIRECTORYImportSize IMAGEDATADIRECTORYImportAddress IMAGEDATADIRECTORYExportSize IMAGEDATADIRECTORYExportAddress ulIMAGEOPTIONALHEADERNumberOfRvaAndSizes ulIMAGEOPTIONALHEADERLoaderFlags ulIMAGEOPTIONALHEADERSizeOfHeapCommit ulIMAGEOPTIONALHEADERSizeOfHeapReserve ulIMAGEOPTIONALHEADERSizeOfStackCommit ulIMAGEOPTIONALHEADERSizeOfStackReserve usIMAGEOPTIONALHEADERDllCharacteristics usIMAGEOPTIONALHEADERSubsystem ulIMAGEOPTIONALHEADERCheckSum ulIMAGEOPTIONALHEADERSizeOfHeaders ulIMAGEOPTIONALHEADERSizeOfImage ulIMAGEOPTIONALHEADERWin32VersionValue usIMAGEOPTIONALHEADERMinorSubsystemVersion usIMAGEOPTIONALHEADERMajorSubsystemVersion usIMAGEOPTIONALHEADERMinorImageVersion usIMAGEOPTIONALHEADERMajorImageVersion usIMAGEOPTIONALHEADERMinorOperatingSystemVersion usIMAGEOPTIONALHEADERMajorOperatingSystemVersion ulIMAGEOPTIONALHEADERFileAlignment ulIMAGEOPTIONALHEADERSectionAlignment ulIMAGEOPTIONALHEADERImageBase usIMAGEFILEHEADERCharacteristics ulIMAGEFILEHEADERNumberOfSymbols ulIMAGEFILEHEADERTimeDateStamp usIMAGEFILEHEADERNumberOfSections usIMAGEFILEHEADERMachine ulLOADEDIMAGESizeOfImage fLOADEDIMAGEDOSImage fLOADEDIMAGESystemImage ulLOADEDIMAGECharacteristics ulLOADEDIMAGENumberOfSections usEXEHEADEROverlayNumber usEXEHEADERRelocationTableOffset usEXEHEADERInitialCS usEXEHEADERInitialIP usEXEHEADERHeaderChecksum usEXEHEADERInitialStackPointer usEXEHEADERInitialStackSegment usEXEHEADERMaxHeaderSize usEXEHEADERMinHeaderSize usEXEHEADERDOSHeaderSizeInParagraphs usEXEHEADERRelocationItems usEXEHEADERTotalPages usEXEHEADERLastPageSize usEXEHEADERSignature LanguageTranslations FileItemInProcessPath RegistryEnumerationDLL ThreatRemovalDLL RealtimeProtectionDLL RuleBasedDLL FileDataSource FileDataBytesX FileDataBytes FileDataMD5 CmdLineArgs CommandLine SpecialBuild PrivateBuild ProductVersion ProductName OriginalFilename LegalCopyright InternalName FileVersion FileDescription CompanyName FileLocation FileDataSize NtQuerySystemInformation NtQueryObject NtDuplicateObject ZwOpenSymbolicLinkObject ZwQuerySymbolicLinkObject ATranslationCodes CProcessListManager::~CProcessListManager - Leave CProcessListManager::~CProcessListManager - Enter Process32First CreateToolhelp32Snapshot (Terminate) UNREGISTERSERVER KILLPROCESSANDREMOVEDIRECTORY KILLPROCESSANDDELETEFILE KILLPROCESSANDREBOOT KILLPROCESS UNDEFINEDTHREAT BROWSERHIJACKER APPLICATION <DEFAULTINSTALLPATH> </DEFAULTINSTALLPATH> <REQUIRESVERSION> </REQUIRESVERSION> <TERMINATIONMETHOD> </TERMINATIONMETHOD> <TERMINATEACTION> </TERMINATEACTION> <OPERATOR> </OPERATOR> <CATEGORY> </CATEGORY> <DEFAULTINSTALLPATHLIST> </DEFAULTINSTALLPATHLIST> <DESCRIPTION> </DESCRIPTION> <PROCESSLIST> </PROCESSLIST> <PROCESSDESCRIPTOR> </PROCESSDESCRIPTOR> Rule Set Version: <DEFINITIONVERSION> </DEFINITIONVERSION> (Terminate) PROCESSLISTRELATED.DB PROCESSLISTRELATED.ZIP FILEDIRECTORYREGEXP CACHEENTRYDOMAIN ZONEMAPRANGE ZONEMAPDOMAIN REQUIRESVERSION TERMINATEACTION DESCRIPTOR Related Rule Set Version: HKEY_USERS HKEY_LOCAL_MACHINE HKEY_CURRENT_USER HKEY_CURRENT_CONFIG HKEY_CLASSES_ROOT CTimer::Elapsed Time - %8I64x - %.6f REGISTRYVALUE VALUETYPESTRING DESCRIPTION LSPNAMESPACEREGISTRY Num_Catalog_Entries usAttributeOffset - %x ulAttributeLength - %x RESIDENT UNNAMED RESIDENT NAMED NON RESIDENT UNNAMED usDataRunOffset - %x usCompressionUnitSize - %x ulPadding - %x ullStartingVCN - %I64x ullRealSize - %I64x ullLastVCN - %I64x ullInitializedDataStreamSize - %I64x ullAllocatedSize - %I64x NON RESIDENT NAMED usNameOffset - %x usAttributeID - %x ulAttribute - %x cNonResident - %x Attribute - %x File Name Attribute Name - Exception ExtractLCNGroups - Exception ExtractLCNGroups - ulTotalGroups = 0x00 GetDataVolumeOffset - Exception !m_psAttribute->cNonResident ClusterInformation - Exception DoIO - Exception CDFANTFS::DoIO - LCN Group( %x ) - Size( %x ) Is NOT Vista() CSABDiskFileAttributeNTFS::DoIO - NULL Buffer *m_pcAttributeData = %x m_pcAttributeData = %x ulSize = %I64x CDFANTFSIA - Exception CDFANTFSIA - 1 - Size - %I64x Read %I64x CDFANTFSIA - Not First Allocation CDFANTFSIA - Size - %I64x Read %I64x CDFANTFSIR - Exception CDFANTFSIR - ulSize = 0x00 ParseIndexAtVCN - Exception usRecordLength - %x ucNameLength - %x ucNameOffset - %x ullBaseFileReference - %I64x Extended Attribute Information CSABDiskFileNTFS::DataStreamSizeExact CSABDiskFileNTFS::DataStreamSizeAllocated CSABDiskFileNTFS::WipeData CSABDiskFileNTFS::NameWIN32 CSABDiskFileNTFS::SetDirectoryName MFT Entry # - %x - Offset( %I64x ) CSABDiskFileNTFS::IsExtendedEntry CDFNTFS::DDSIO( MA ) - 1 CSABDiskFileNTFS::WDS CSABDiskFileNTFS::ReleaseResources CSABDiskFileNTFS::RMFTE CSABDiskFileNTFS::RMFTE - 3 MFT Index Beyond Stream CSABDiskFileNTFS::RMFTE - 2 ( ULONG ulMFTIndex(%x), HANDLE hStream(%x) ) CSABDiskFileNTFS::FromMFTIndex CSABDiskFileNTFS::PopulateFileNameList - Exception CSABDiskFileNTFS::ReAcquireResources CDFNTFS::PEAL - 5 - %I64x %I64x %x CSABDiskFileNTFS::GetExtendedAttributes CSABDiskFileNTFS::PopulateAttributeList CSABDiskFileNTFS::Attributes CSABDiskFileNTFS::ParentDirectoryIndex CSABDiskFileNTFS::NameDOS CSABDiskFileNTFS::NamePOSIX CSABDiskFileNTFS::NameDirectory CSABDiskFileNTFS::DirectoryTreeList CSABDiskFileNTFS::CreatedTime CSABDiskFileNTFS::EnumDataStreams CSABDiskFileNTFS::OpenDataStream CSABDiskFileNTFS::InitializeDirectorySystem CDFNTFS::IMFTS - Found Default Stream CDFNTFS::IMFTS - Has Data Stream CSABDiskFileNTFS::FromVolumeOffset \UtilityFiles IsInterfaceAvailable - Leave - Failure IsInterfaceAvailable - Leave - ( %x ) IsInterfaceAvailable( %x ) - Enter BackupSeek BackupRead Read Error : %x::%x - %x ( %x, %x ) Address( %x ) - Size( %x ) Exception! Invalid Read Ptr - %x ulGuardBytes - %x ulBlockSize - %x ulReturnAddress - %x ulSignature - %x Found Valid Block - %x DumpInvalidMemoryInformation - %x CSABDV::AllocateMemory - Exception - %x - %x CSABDV::AllocateMemory - Return NULL ( %x ) CSABDV::AllocateMemory - Zero Size CSABDV::FreeMemory - Exception - %x - %x CSABDV::FreeMemory - NULL Pointer CSABDV::FreeMemory - delete memory not valid CSABDV::FreeMemory - Bad Header CSABDV::FreeMemory - Guard Bytes Overwritten CSABDiskVolumeNTFS::ReadUpCaseFile( VOID ) CSABDiskVolumeNTFS::RUCF - L CSABDiskVolumeNTFS::RUCF - E ulRead( %x ) CSABDiskVolumeNTFS::VBPB - Read CSABDiskVolumeNTFS::VBPB - For Volume CSABDiskVolumeNTFS::VBPB - For Disk CSABDiskVolumeNTFS::VBPB - Opened CSABDiskVolumeNTFS::~CSABDiskVolumeNTFS CSABDiskVolumeNTFS::~ - L CSABDiskVolumeNTFS::~ - E CSABDiskVolumeNTFS::FindEntryInIndexAllocation CSABDiskVolumeNTFS::FindEntryInDir( \\.\PhysicalDrive0 CSABDiskVolumeNTFS::EnumerateSubDirectories CDVNTFS::ESD - Error In FoundFile CDVNTFS::ESD - Error Sub Directory Enumeration CDVNTFS::ESD - NULL Index Entry CDVNTFS::ESD - Error Creating Directory String CSABDiskVolumeNTFS::Open( VOID ) \??\PhysicalDrive0 CSABDiskVolumeNTFS::Open - Failed To Open Volume CSABDiskVolumeNTFS::ParseBPB CSABDiskVolumeNTFS::PBPB - L CSABDiskVolumeNTFS::ParseBPB - Failed To Read BPB MFT::Attributes - %x ParseBPB::MFT File Attributes Read ParseBPB::MFT File Loaded From Volume Offset ParseBPB::MFT File Created ParseBPB::Create MFT File BPB::SectorsPerTrack - %x BPB::VolumeSerialNumber - % I64x BPB::TotalSectors - %I64x BPB::MFTMirrorBaseCluster - %I64x BPB::MFTBaseCluster - %I64x BPB::ClustersPerIndexBlock - %d BPB::ClustersPerFileSegment - %d BPB::SectorsPerCluster - %d ParseBPB::ReadFile CSABDiskVolumeNTFS::IVBPB CSABDiskVolumeNTFS::PBPB - E CSABDiskVolumeNTFS::EnumerateAllFiles CSABDiskVolumeNTFS::EnumerateDirectory CSABDiskVolumeNTFS::FileFromPath CSABDiskVolumeNTFS::CSABDiskVolumeNTFS CDVNTFS::CSABDiskVolumeNTFS - L CDVNTFS::CSABDiskVolumeNTFS - E CSABDiskVolumeNTFS::IVA - xxx CSABDiskVolumeNTFS::IVA - Volume Is Not Accessible CDVNTFS::IVA - E m_poContainer->GetSizeOfImage() = %I64x m_poContainer->GetMappedAddress() = %I64x m_psDescriptor = %I64x Failed Validity Test CMFTE::CMFTE - 1a %I64x %x CMFTE::CMFTE - 2a %I64x %x UNKNOWN Volume Object Create FAT12 Volume Object Create FAT16 Volume Object Create FAT32 Volume Object Create NTFS Volume Object Heap Start ::: Address( %x ) - Size( %x ) StringFileInfo Corrupted Heap Block Previous Heap Block 1 Previous Heap Block 2 HeapValidate PackedCatalogItem System Volume Information MsiGetComponentPathA MsiGetShortcutTargetA L\DEVICE\HARDDISKVOLUME Removing Privileges From: CLASSES_ROOT\ Removing SubKey Privileges From: Removing Key Privileges From: Translation VarFileInfo VS_VERSION_INFO OWMZ - Could Not Find File OWMZ - FAILED # HTTP Cookie File \cookies.txt Catalog_Entries and restart the scan of your system. Validating Heap ScanPathDirect SYSTEM32\USERINIT.EXE GVI::FS : Allocated( %I64x ) Real( %I64x ) Invalid Rule Source- %s #DIRECTORYCOUNT# #FILECOUNT# #DIRECTORY# Invalid Rule Operator - %s Interface\ VersionIndependentProgID <PACKED><UPX> #REGKEYCOUNT# #REGVALCOUNT# REG_QWORD_LITTLE_ENDIAN REG_MULTI_SZ REG_DWORD_BIG_ENDIAN REG_DWORD_LITTLE_ENDIAN REG_BINARY RUNDLL32.EXE Thawte Code Signing CA