---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!CreateWindowExW 77130E51 4 Bytes JMP 63508157 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!DialogBoxIndirectParamW 77154AA7 4 Bytes JMP 6362F5E8 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!DialogBoxParamW 7715564A 4 Bytes JMP 63424BA7 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!DialogBoxParamA 7716CF6A 4 Bytes JMP 6362F585 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!DialogBoxIndirectParamA 7716D29C 4 Bytes JMP 6362F64B C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!MessageBoxIndirectA 7717E8C9 4 Bytes JMP 6362F51A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!MessageBoxIndirectW 7717E9C3 4 Bytes JMP 6362F4AF C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!MessageBoxExA 7717EA29 4 Bytes JMP 6362F44D C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2052] USER32.dll!MessageBoxExW 7717EA4D 4 Bytes JMP 6362F3EB C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!CreateDialogParamW 77129BFF 4 Bytes JMP 6345C578 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!EnableWindow 7712A72E 4 Bytes JMP 6345C4F3 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!GetAsyncKeyState 7712C09A 4 Bytes JMP 6341D6E9 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!UnhookWindowsHookEx 7712CC7B 5 Bytes JMP 6351835E C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!CallNextHookEx 7712CC8F 4 Bytes JMP 634F9D5C C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!CreateWindowExW 77130E51 4 Bytes JMP 63508157 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!SetWindowsHookExW 7713210A 4 Bytes JMP 634B4633 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!GetKeyState 77134FDA 4 Bytes JMP 6345D76A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!IsDialogMessageW 77136F06 4 Bytes JMP 63424284 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!CreateDialogParamA 77143E79 4 Bytes JMP 636301E9 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!IsDialogMessage 7714407A 4 Bytes JMP 6362FA8A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!CreateDialogIndirectParamA 77149110 4 Bytes JMP 63630220 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!CreateDialogIndirectParamW 771508AD 4 Bytes JMP 63630257 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!DialogBoxIndirectParamW 77154AA7 4 Bytes JMP 6362F5E8 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!EndDialog 7715555C 4 Bytes JMP 63425AE9 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!DialogBoxParamW 7715564A 4 Bytes JMP 63424BA7 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!SetKeyboardState 77156B52 5 Bytes JMP 6362FDEF C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!SendInput 77157055 5 Bytes JMP 636309B4 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!SetCursorPos 7716C1D8 4 Bytes JMP 63630A0C C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!DialogBoxParamA 7716CF6A 4 Bytes JMP 6362F585 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!DialogBoxIndirectParamA 7716D29C 4 Bytes JMP 6362F64B C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!MessageBoxIndirectA 7717E8C9 4 Bytes JMP 6362F51A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!MessageBoxIndirectW 7717E9C3 4 Bytes JMP 6362F4AF C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!MessageBoxExA 7717EA29 4 Bytes JMP 6362F44D C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!MessageBoxExW 7717EA4D 4 Bytes JMP 6362F3EB C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] USER32.dll!keybd_event 7717EC9B 4 Bytes JMP 63630D3F C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] SHELL32.dll!SHChangeNotification_Lock + 45BA 7621B3E8 4 Bytes [11, 36, 20, 62]
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] SHELL32.dll!SHChangeNotification_Lock + 45C2 7621B3F0 8 Bytes [5F, 35, 20, 62, D0, 73, 1F, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] ole32.dll!OleLoadFromStream 75C35B88 5 Bytes JMP 6362F946 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[2768] ole32.dll!CoCreateInstance 75C857FC 5 Bytes JMP 63508C45 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CreateDialogParamW 77129BFF 4 Bytes JMP 6345C578 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!EnableWindow 7712A72E 4 Bytes JMP 6345C4F3 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!GetAsyncKeyState 7712C09A 4 Bytes JMP 6341D6E9 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!UnhookWindowsHookEx 7712CC7B 5 Bytes JMP 6351835E C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CallNextHookEx 7712CC8F 4 Bytes JMP 634F9D5C C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CreateWindowExW 77130E51 4 Bytes JMP 63508157 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!SetWindowsHookExW 7713210A 4 Bytes JMP 634B4633 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!GetKeyState 77134FDA 4 Bytes JMP 6345D76A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!IsDialogMessageW 77136F06 4 Bytes JMP 63424284 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CreateDialogParamA 77143E79 4 Bytes JMP 636301E9 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!IsDialogMessage 7714407A 4 Bytes JMP 6362FA8A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CreateDialogIndirectParamA 77149110 4 Bytes JMP 63630220 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!CreateDialogIndirectParamW 771508AD 4 Bytes JMP 63630257 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxIndirectParamW 77154AA7 4 Bytes JMP 6362F5E8 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!EndDialog 7715555C 4 Bytes JMP 63425AE9 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxParamW 7715564A 4 Bytes JMP 63424BA7 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!SetKeyboardState 77156B52 5 Bytes JMP 6362FDEF C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!SendInput 77157055 5 Bytes JMP 636309B4 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!SetCursorPos 7716C1D8 4 Bytes JMP 63630A0C C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxParamA 7716CF6A 4 Bytes JMP 6362F585 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!DialogBoxIndirectParamA 7716D29C 4 Bytes JMP 6362F64B C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxIndirectA 7717E8C9 4 Bytes JMP 6362F51A C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxIndirectW 7717E9C3 4 Bytes JMP 6362F4AF C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxExA 7717EA29 4 Bytes JMP 6362F44D C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!MessageBoxExW 7717EA4D 4 Bytes JMP 6362F3EB C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] USER32.dll!keybd_event 7717EC9B 4 Bytes JMP 63630D3F C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] SHELL32.dll!SHChangeNotification_Lock + 45BA 7621B3E8 4 Bytes [11, 36, 20, 62]
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] SHELL32.dll!SHChangeNotification_Lock + 45C2 7621B3F0 8 Bytes [5F, 35, 20, 62, D0, 73, 1F, ...]
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] ole32.dll!OleLoadFromStream 75C35B88 5 Bytes JMP 6362F946 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)
.text C:\Program Files\Internet Explorer\iexplore.exe[5488] ole32.dll!CoCreateInstance 75C857FC 5 Bytes JMP 63508C45 C:\windows\system32\IEFRAME.dll (Internet Browser/Microsoft Corporation)