You are on page 1of 102

07/01/13 06:16:24

D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:24
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:27
D
call: DLL_PROCESS_ATTACH
07/01/13 06:16:28
A
07/01/13 06:16:28
R
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1767636992 - Reason for


Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
-> NtTerminateProcessCallback
Dejamos matar a cyberclient.exe
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for

07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
07/01/13 06:16:28
D
call: DLL_PROCESS_DETACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:21
A
06/01/13 18:17:22
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:22
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:22
A
06/01/13 18:17:22
A
06/01/13 18:17:22
A
06/01/13 18:17:22
A
06/01/13 18:17:22
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:22
D
call: DLL_PROCESS_ATTACH
06/01/13 18:17:22
A
06/01/13 18:17:22
D
call: DLL_PROCESS_DETACH
06/01/13 18:17:22
A
06/01/13 18:17:22
D
call: DLL_PROCESS_DETACH
06/01/13 18:18:05
D
call: DLL_PROCESS_ATTACH
06/01/13 18:18:06
D
call: DLL_PROCESS_ATTACH
06/01/13 18:18:11
A

Enter DllMain -> Handle: 1767636992 - Reason for


Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1767636992 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1833762816 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
-> NtTerminateProcessCallback

06/01/13 18:18:11
D
call: DLL_PROCESS_DETACH
06/01/13 18:18:11
A
06/01/13 18:18:11
F
06/01/13 18:18:11
A
06/01/13 18:18:17
D
call: DLL_PROCESS_ATTACH
06/01/13 18:18:23
A
06/01/13 18:18:23
D
call: DLL_PROCESS_DETACH
06/01/13 18:18:24
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:34
A
06/01/13 18:19:34
D
call: DLL_PROCESS_DETACH
06/01/13 18:19:34
A
06/01/13 18:19:34
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:35
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:36
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:36
D
call: DLL_PROCESS_ATTACH
06/01/13 18:19:37
A
06/01/13 18:19:37
A
06/01/13 18:19:37
D
call: DLL_PROCESS_DETACH
06/01/13 18:19:41
A
06/01/13 18:19:41
D
call: DLL_PROCESS_DETACH
06/01/13 18:20:28
A
06/01/13 18:20:28
D
call: DLL_PROCESS_DETACH
06/01/13 18:22:36
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1833762816 - Reason for


-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1833762816 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1833762816 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for

06/01/13 18:23:37
A
06/01/13 18:23:37
D
call: DLL_PROCESS_DETACH
06/01/13 18:26:15
D
call: DLL_PROCESS_ATTACH
06/01/13 18:26:16
A
06/01/13 18:26:16
D
call: DLL_PROCESS_DETACH
06/01/13 18:26:21
A
06/01/13 18:26:42
D
call: DLL_PROCESS_ATTACH
06/01/13 18:26:48
A
06/01/13 18:26:48
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
A
06/01/13 18:28:07
A
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
A
06/01/13 18:28:07
A
06/01/13 18:28:07
A
06/01/13 18:28:07
A
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:07
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:08
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:08
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:08
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:08
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:08
A
06/01/13 18:28:08
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:08
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1906180096 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback

06/01/13 18:28:08
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:08
A
06/01/13 18:28:08
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:08
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:09
A
06/01/13 18:28:09
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:09
A
06/01/13 18:28:09
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:10
D
call: DLL_PROCESS_ATTACH
06/01/13 18:28:10
A
06/01/13 18:28:10
D
call: DLL_PROCESS_DETACH
06/01/13 18:28:20
A
06/01/13 18:28:20
D
call: DLL_PROCESS_DETACH
06/01/13 18:29:00
A
06/01/13 18:29:00
D
call: DLL_PROCESS_DETACH
06/01/13 18:29:03
D
call: DLL_PROCESS_ATTACH
06/01/13 18:29:08
A
06/01/13 18:29:13
D
call: DLL_PROCESS_ATTACH
06/01/13 18:30:10
A
06/01/13 18:30:25
D
call: DLL_PROCESS_ATTACH
06/01/13 18:30:35
D
call: DLL_PROCESS_ATTACH
06/01/13 18:30:36
A
06/01/13 18:30:38
D
call: DLL_PROCESS_ATTACH
06/01/13 18:30:42
A
06/01/13 18:30:42
D
call: DLL_PROCESS_DETACH
06/01/13 18:30:43
A
06/01/13 18:31:12
D
call: DLL_PROCESS_ATTACH
06/01/13 18:31:15
D
call: DLL_PROCESS_ATTACH
06/01/13 18:31:19
A
06/01/13 18:31:22
A
06/01/13 18:31:22
D
call: DLL_PROCESS_DETACH
06/01/13 18:31:32
D
call: DLL_PROCESS_ATTACH
06/01/13 18:31:39
A
06/01/13 18:31:39
D
call: DLL_PROCESS_DETACH
06/01/13 18:31:39
D
call: DLL_PROCESS_ATTACH
06/01/13 18:31:40
D
call: DLL_PROCESS_ATTACH
06/01/13 18:31:44
A
06/01/13 18:31:44
R

Enter DllMain -> Handle: 1814298624 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe

06/01/13 18:31:45
A
06/01/13 18:31:45
D
call: DLL_PROCESS_DETACH
06/01/13 18:31:45
D
call: DLL_PROCESS_ATTACH
06/01/13 18:31:52
A
06/01/13 18:31:52
D
call: DLL_PROCESS_DETACH
06/01/13 18:32:09
A
06/01/13 18:32:09
D
call: DLL_PROCESS_DETACH
06/01/13 18:40:48
D
call: DLL_PROCESS_ATTACH
06/01/13 18:40:48
A
06/01/13 18:40:48
D
call: DLL_PROCESS_DETACH
06/01/13 18:41:17
D
call: DLL_PROCESS_ATTACH
06/01/13 18:41:25
A
06/01/13 18:41:25
D
call: DLL_PROCESS_DETACH
06/01/13 18:41:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:41:31
D
call: DLL_PROCESS_ATTACH
06/01/13 18:41:32
A
06/01/13 18:41:39
D
call: DLL_PROCESS_ATTACH
06/01/13 18:41:39
D
call: DLL_PROCESS_ATTACH
06/01/13 18:41:44
A
06/01/13 18:41:55
D
call: DLL_PROCESS_ATTACH
06/01/13 18:41:55
A
06/01/13 18:41:55
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
A
06/01/13 18:50:27
D

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1814298624 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for

call: DLL_PROCESS_DETACH
06/01/13 18:50:27
A
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:27
A
06/01/13 18:50:27
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:27
A
06/01/13 18:50:27
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:28
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:28
A
06/01/13 18:50:28
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:28
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:28
A
06/01/13 18:50:28
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:29
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:29
A
06/01/13 18:50:29
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:29
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:30
D
call: DLL_PROCESS_ATTACH
06/01/13 18:50:41
A
06/01/13 18:50:41
A
06/01/13 18:50:41
D
call: DLL_PROCESS_DETACH
06/01/13 18:50:42
A
06/01/13 18:50:42
D
call: DLL_PROCESS_DETACH
06/01/13 18:51:20
A
06/01/13 18:51:20
D
call: DLL_PROCESS_DETACH
06/01/13 18:53:08
D
call: DLL_PROCESS_ATTACH
06/01/13 18:53:16
A
06/01/13 18:53:16
D
call: DLL_PROCESS_DETACH
06/01/13 18:53:29
D
call: DLL_PROCESS_ATTACH
06/01/13 18:53:32
A
06/01/13 18:53:32
D
call: DLL_PROCESS_DETACH
06/01/13 18:53:33
D
call: DLL_PROCESS_ATTACH
06/01/13 18:53:39
D
call: DLL_PROCESS_ATTACH
06/01/13 18:53:40
A
06/01/13 18:53:40
D
call: DLL_PROCESS_DETACH

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for

06/01/13 18:53:40
D
call: DLL_PROCESS_ATTACH
06/01/13 18:53:41
A
06/01/13 18:53:41
D
call: DLL_PROCESS_DETACH
06/01/13 18:53:53
A
06/01/13 18:53:53
D
call: DLL_PROCESS_DETACH
06/01/13 18:54:40
A
06/01/13 18:54:40
D
call: DLL_PROCESS_DETACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:06
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:07
A
27/01/13 08:02:07
A
27/01/13 08:02:07
A
27/01/13 08:02:07
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:07
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:07
A
27/01/13 08:02:07
D
call: DLL_PROCESS_DETACH
27/01/13 08:02:07
A
27/01/13 08:02:07
D
call: DLL_PROCESS_DETACH
27/01/13 08:02:07
D
call: DLL_PROCESS_ATTACH
27/01/13 08:02:10
A
27/01/13 08:02:10
D
call: DLL_PROCESS_DETACH
27/01/13 08:02:10
A
27/01/13 08:02:10
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1820917760 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1820917760 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for

27/01/13 08:02:11
A
27/01/13 08:02:11
D
call: DLL_PROCESS_DETACH
27/01/13 08:02:54
A
27/01/13 08:02:54
D
call: DLL_PROCESS_DETACH
27/01/13 08:03:58
D
call: DLL_PROCESS_ATTACH
27/01/13 08:03:59
D
call: DLL_PROCESS_ATTACH
27/01/13 08:04:00
A
27/01/13 08:04:00
D
call: DLL_PROCESS_DETACH
27/01/13 08:04:04
A
27/01/13 08:04:30
D
call: DLL_PROCESS_ATTACH
27/01/13 08:04:30
A
27/01/13 08:04:30
D
call: DLL_PROCESS_DETACH
27/01/13 08:04:44
A
27/01/13 08:04:44
D
call: DLL_PROCESS_DETACH
27/01/13 08:04:45
D
call: DLL_PROCESS_ATTACH
27/01/13 08:05:01
A
27/01/13 08:05:01
D
call: DLL_PROCESS_DETACH
27/01/13 08:05:38
D
call: DLL_PROCESS_ATTACH
27/01/13 08:05:57
A
27/01/13 08:05:57
D
call: DLL_PROCESS_DETACH
27/01/13 08:06:05
A
27/01/13 08:06:05
D
call: DLL_PROCESS_DETACH
27/01/13 08:07:09
A
27/01/13 08:07:09
D
call: DLL_PROCESS_DETACH
27/01/13 08:07:09
D
call: DLL_PROCESS_ATTACH
27/01/13 08:07:10
A
27/01/13 08:07:10
D
call: DLL_PROCESS_DETACH
27/01/13 08:07:10
D
call: DLL_PROCESS_ATTACH
27/01/13 08:07:13
A
27/01/13 08:07:13
D
call: DLL_PROCESS_DETACH
27/01/13 08:09:40
D
call: DLL_PROCESS_ATTACH
27/01/13 08:10:25
A
27/01/13 08:10:25
D
call: DLL_PROCESS_DETACH
27/01/13 08:10:25
D
call: DLL_PROCESS_ATTACH
27/01/13 08:10:30
A
27/01/13 08:11:39
D
call: DLL_PROCESS_ATTACH
27/01/13 08:11:39
D
call: DLL_PROCESS_ATTACH

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for

27/01/13 08:11:44
A
27/01/13 08:13:56
D
call: DLL_PROCESS_ATTACH
27/01/13 08:13:56
A
27/01/13 08:13:56
D
call: DLL_PROCESS_DETACH
27/01/13 08:13:56
D
call: DLL_PROCESS_ATTACH
27/01/13 08:14:39
D
call: DLL_PROCESS_ATTACH
27/01/13 08:14:39
A
27/01/13 08:14:39
D
call: DLL_PROCESS_DETACH
27/01/13 08:15:01
A
27/01/13 08:15:01
D
call: DLL_PROCESS_DETACH
27/01/13 08:16:39
D
call: DLL_PROCESS_ATTACH
27/01/13 08:16:44
A
27/01/13 08:21:15
A
27/01/13 08:21:15
D
call: DLL_PROCESS_DETACH
27/01/13 08:21:39
A
27/01/13 08:21:39
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
A
29/04/13 08:35:11
A
29/04/13 08:35:11
A
29/04/13 08:35:11
A
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
A
29/04/13 08:35:11
D
call: DLL_PROCESS_DETACH

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1798701056 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for

29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:11
A
29/04/13 08:35:11
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:11
A
29/04/13 08:35:11
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:15
A
29/04/13 08:35:15
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:21
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:22
A
29/04/13 08:35:22
F
29/04/13 08:35:22
A
29/04/13 08:35:22
F
29/04/13 08:35:22
A
29/04/13 08:35:22
F
29/04/13 08:35:22
A
29/04/13 08:35:22
F
29/04/13 08:35:22
A
29/04/13 08:35:22
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:39
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:40
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:40
A
29/04/13 08:35:40
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:40
A
29/04/13 08:35:40
F
29/04/13 08:35:40
A
29/04/13 08:35:40
F
29/04/13 08:35:40
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:40
A
29/04/13 08:35:40
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:40
A
29/04/13 08:35:40
F
29/04/13 08:35:40
A
29/04/13 08:35:40
F
29/04/13 08:35:41
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:45
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:45
A
29/04/13 08:35:45
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:45
D
call: DLL_PROCESS_ATTACH
29/04/13 08:35:45
A
29/04/13 08:35:45
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:45
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1760755712 - Reason for


Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for

29/04/13 08:35:45
A
29/04/13 08:35:45
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:50
A
29/04/13 08:35:50
D
call: DLL_PROCESS_DETACH
29/04/13 08:35:55
A
29/04/13 08:35:55
D
call: DLL_PROCESS_DETACH
29/04/13 08:37:50
D
call: DLL_PROCESS_ATTACH
29/04/13 08:38:09
D
call: DLL_PROCESS_ATTACH
29/04/13 08:38:30
A
29/04/13 08:38:30
D
call: DLL_PROCESS_DETACH
29/04/13 08:39:20
A
29/04/13 08:39:20
D
call: DLL_PROCESS_DETACH
29/04/13 08:39:53
D
call: DLL_PROCESS_ATTACH
29/04/13 08:39:53
A
29/04/13 08:39:53
D
call: DLL_PROCESS_DETACH
29/04/13 08:39:56
D
call: DLL_PROCESS_ATTACH
29/04/13 08:39:56
D
call: DLL_PROCESS_ATTACH
29/04/13 08:39:56
A
29/04/13 08:39:56
D
call: DLL_PROCESS_DETACH
29/04/13 08:44:50
D
call: DLL_PROCESS_ATTACH
29/04/13 08:44:51
D
call: DLL_PROCESS_ATTACH
29/04/13 08:44:56
A
29/04/13 08:47:51
D
call: DLL_PROCESS_ATTACH
29/04/13 08:47:51
A
29/04/13 08:47:52
D
call: DLL_PROCESS_DETACH
29/04/13 08:48:44
A
29/04/13 08:48:44
D
call: DLL_PROCESS_DETACH
29/04/13 08:49:50
D
call: DLL_PROCESS_ATTACH
29/04/13 08:49:55
A
29/04/13 08:54:50
A
29/04/13 08:54:50
D
call: DLL_PROCESS_DETACH
29/04/13 09:03:15
D
call: DLL_PROCESS_ATTACH
29/04/13 09:03:16
A
29/04/13 09:03:16
D
call: DLL_PROCESS_DETACH
29/04/13 09:03:17
D
call: DLL_PROCESS_ATTACH
29/04/13 09:03:19
A
29/04/13 09:03:19
R
29/04/13 09:03:19
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1760755712 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback

29/04/13 09:03:19
R
29/04/13 09:03:19
A
29/04/13 09:03:19
A
29/04/13 09:03:21
A
29/04/13 09:03:21
D
call: DLL_PROCESS_DETACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:25
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:26
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:26
A
29/04/13 09:04:26
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:26
D
call: DLL_PROCESS_ATTACH
29/04/13 09:04:27
A
29/04/13 09:04:27
D
call: DLL_PROCESS_DETACH
29/04/13 09:04:27
A
29/04/13 09:04:27
D
call: DLL_PROCESS_DETACH
29/04/13 09:04:42
A
29/04/13 09:04:42
D
call: DLL_PROCESS_DETACH
29/04/13 09:05:00
D
call: DLL_PROCESS_ATTACH
29/04/13 09:05:00
D
call: DLL_PROCESS_ATTACH
29/04/13 09:05:00
A
29/04/13 09:05:00
D
call: DLL_PROCESS_DETACH
29/04/13 09:05:17
A
29/04/13 09:05:17
D
call: DLL_PROCESS_DETACH
29/04/13 09:07:27
D
call: DLL_PROCESS_ATTACH
29/04/13 09:08:02
D
call: DLL_PROCESS_ATTACH
29/04/13 09:08:02
A
29/04/13 09:08:02
D

La victima es chrome.exe Asesino chrome.exe


-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1760755712 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for

call: DLL_PROCESS_DETACH
29/04/13 09:08:38
A
29/04/13 09:08:38
D
call: DLL_PROCESS_DETACH
29/04/13 09:08:47
D
call: DLL_PROCESS_ATTACH
29/04/13 09:08:48
D
call: DLL_PROCESS_ATTACH
29/04/13 09:08:48
A
29/04/13 09:08:48
D
call: DLL_PROCESS_DETACH
29/04/13 09:08:48
A
29/04/13 09:08:48
D
call: DLL_PROCESS_DETACH
29/04/13 09:09:16
D
call: DLL_PROCESS_ATTACH
29/04/13 09:09:16
D
call: DLL_PROCESS_ATTACH
29/04/13 09:09:16
A
29/04/13 09:09:16
D
call: DLL_PROCESS_DETACH
29/04/13 09:09:41
A
29/04/13 09:09:41
D
call: DLL_PROCESS_DETACH
29/04/13 09:10:00
A
29/04/13 09:10:00
D
call: DLL_PROCESS_DETACH
29/04/13 09:13:40
D
call: DLL_PROCESS_ATTACH
29/04/13 09:13:40
A
29/04/13 09:13:40
D
call: DLL_PROCESS_DETACH
29/04/13 09:17:14
D
call: DLL_PROCESS_ATTACH
29/04/13 09:17:14
A
29/04/13 09:17:14
D
call: DLL_PROCESS_DETACH
29/04/13 09:18:54
D
call: DLL_PROCESS_ATTACH
29/04/13 09:18:56
D
call: DLL_PROCESS_ATTACH
29/04/13 09:18:56
A
29/04/13 09:18:56
A
29/04/13 09:18:56
A
29/04/13 09:18:56
D
call: DLL_PROCESS_ATTACH
29/04/13 09:18:59
A
29/04/13 09:18:59
F
29/04/13 09:18:59
A
29/04/13 09:18:59
F
29/04/13 09:18:59
A
29/04/13 09:18:59
F
29/04/13 09:18:59
A
29/04/13 09:18:59
F
29/04/13 09:18:59
A
29/04/13 09:18:59
F
29/04/13 09:19:01
A
29/04/13 09:19:01
F
29/04/13 09:19:01
A
29/04/13 09:19:01
F

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1

29/04/13 09:19:02
D
call: DLL_PROCESS_ATTACH
29/04/13 09:19:08
A
29/04/13 09:19:08
D
call: DLL_PROCESS_DETACH
29/04/13 09:19:12
D
call: DLL_PROCESS_ATTACH
29/04/13 09:19:13
D
call: DLL_PROCESS_ATTACH
29/04/13 09:19:18
A
29/04/13 09:19:50
A
29/04/13 09:19:50
F
29/04/13 09:19:50
A
29/04/13 09:19:50
F
29/04/13 09:19:56
A
29/04/13 09:19:56
F
29/04/13 09:19:56
A
29/04/13 09:19:56
F
29/04/13 09:19:58
D
call: DLL_PROCESS_ATTACH
29/04/13 09:19:58
A
29/04/13 09:19:58
D
call: DLL_PROCESS_DETACH
29/04/13 09:19:58
D
call: DLL_PROCESS_ATTACH
29/04/13 09:20:02
A
29/04/13 09:20:02
F
29/04/13 09:20:02
A
29/04/13 09:20:02
F
29/04/13 09:20:04
A
29/04/13 09:20:04
D
call: DLL_PROCESS_DETACH
29/04/13 09:20:18
A
29/04/13 09:20:18
F
29/04/13 09:20:18
A
29/04/13 09:20:18
F
29/04/13 09:20:45
A
29/04/13 09:20:45
F
29/04/13 09:20:45
A
29/04/13 09:20:45
F
29/04/13 09:20:54
A
29/04/13 09:20:54
F
29/04/13 09:20:54
A
29/04/13 09:20:54
F
29/04/13 09:21:02
A
29/04/13 09:21:02
F
29/04/13 09:21:02
A
29/04/13 09:21:02
F
29/04/13 09:24:13
A
29/04/13 09:24:13
D
call: DLL_PROCESS_DETACH
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A

Enter DllMain -> Handle: 1828519936 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback

29/04/13 09:25:26
D
call: DLL_PROCESS_DETACH
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
F
29/04/13 09:25:26
A
29/04/13 09:25:26
D
call: DLL_PROCESS_DETACH
29/04/13 09:25:26
D
call: DLL_PROCESS_ATTACH
29/04/13 09:25:33
A
29/04/13 09:25:33
D
call: DLL_PROCESS_DETACH
29/04/13 09:28:54
D
call: DLL_PROCESS_ATTACH
29/04/13 09:28:54
D
call: DLL_PROCESS_ATTACH
29/04/13 09:28:55
A
29/04/13 09:28:55
D
call: DLL_PROCESS_DETACH
29/04/13 09:28:56
D
call: DLL_PROCESS_ATTACH
29/04/13 09:28:56
D
call: DLL_PROCESS_ATTACH
29/04/13 09:28:56
A
29/04/13 09:28:56
A
29/04/13 09:28:56
A
29/04/13 09:28:56
A
29/04/13 09:29:03
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:03
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:04
A
29/04/13 09:29:04
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:04
A
29/04/13 09:29:04
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:04
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:04
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:04
A
29/04/13 09:29:04
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:04
A
29/04/13 09:29:04
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:06
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:06
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:06
A

Enter DllMain -> Handle: 1828519936 - Reason for


-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback

29/04/13 09:29:06
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:06
A
29/04/13 09:29:06
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:07
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:07
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:07
A
29/04/13 09:29:07
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:07
A
29/04/13 09:29:07
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:09
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:09
A
29/04/13 09:29:09
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:11
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:12
A
29/04/13 09:29:12
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:12
D
call: DLL_PROCESS_ATTACH
29/04/13 09:29:20
A
29/04/13 09:29:20
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:21
A
29/04/13 09:29:21
D
call: DLL_PROCESS_DETACH
29/04/13 09:29:21
A
29/04/13 09:29:21
D
call: DLL_PROCESS_DETACH
29/04/13 09:30:21
D
call: DLL_PROCESS_ATTACH
29/04/13 09:30:28
A
29/04/13 09:30:28
D
call: DLL_PROCESS_DETACH
29/04/13 09:30:33
D
call: DLL_PROCESS_ATTACH
29/04/13 09:30:36
D
call: DLL_PROCESS_ATTACH
29/04/13 09:30:38
A
29/04/13 09:30:38
F
29/04/13 09:30:38
A
29/04/13 09:30:38
F
29/04/13 09:30:39
A
29/04/13 09:30:39
F
29/04/13 09:30:39
A
29/04/13 09:30:39
F
29/04/13 09:30:39
A
29/04/13 09:30:39
F
29/04/13 09:30:39
A
29/04/13 09:30:39
F
29/04/13 09:30:40
A
29/04/13 09:30:40
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1828519936 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for

29/04/13 09:32:09
D
call: DLL_PROCESS_ATTACH
29/04/13 09:33:03
D
call: DLL_PROCESS_ATTACH
29/04/13 09:33:05
A
29/04/13 09:33:05
F
29/04/13 09:33:05
A
29/04/13 09:33:05
F
29/04/13 09:33:05
A
29/04/13 09:33:05
F
29/04/13 09:33:56
A
29/04/13 09:33:56
D
call: DLL_PROCESS_DETACH
29/04/13 09:34:39
A
29/04/13 09:34:39
D
call: DLL_PROCESS_DETACH
29/04/13 09:34:39
A
29/04/13 09:34:39
D
call: DLL_PROCESS_DETACH
29/04/13 09:36:26
D
call: DLL_PROCESS_ATTACH
29/04/13 09:36:34
A
29/04/13 09:36:34
D
call: DLL_PROCESS_DETACH
29/04/13 09:51:00
D
call: DLL_PROCESS_ATTACH
29/04/13 09:51:03
A
29/04/13 09:51:03
D
call: DLL_PROCESS_DETACH
29/04/13 09:51:09
D
call: DLL_PROCESS_ATTACH
29/04/13 09:51:16
A
29/04/13 09:51:16
D
call: DLL_PROCESS_DETACH
29/04/13 09:51:16
D
call: DLL_PROCESS_ATTACH
29/04/13 09:51:23
A
29/04/13 09:51:23
D
call: DLL_PROCESS_DETACH
29/04/13 10:29:39
D
call: DLL_PROCESS_ATTACH
29/04/13 10:29:53
A
29/04/13 10:29:53
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1828519936 - Reason for


Enter DllMain -> Handle: 1828519936 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1828519936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1828519936 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for

10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
A
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
A
10/06/13 08:32:02
A
10/06/13 08:32:02
A
10/06/13 08:32:02
A
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:02
A
10/06/13 08:32:02
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:02
A
10/06/13 08:32:02
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:03
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:03
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:03
A
10/06/13 08:32:03
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:04
A
10/06/13 08:32:04
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:09
A
10/06/13 08:32:09
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:11
A
10/06/13 08:32:11
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:19
D
call: DLL_PROCESS_ATTACH
10/06/13 08:32:21
A
10/06/13 08:32:21
D
call: DLL_PROCESS_DETACH
10/06/13 08:32:28
A
10/06/13 08:32:28
F
10/06/13 08:32:28
A
10/06/13 08:32:28
F

Enter DllMain -> Handle: 1829437440 - Reason for


Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1

10/06/13 08:32:28
A
10/06/13 08:32:28
F
10/06/13 08:32:58
A
10/06/13 08:32:58
D
call: DLL_PROCESS_DETACH
10/06/13 08:33:20
D
call: DLL_PROCESS_ATTACH
10/06/13 08:33:25
A
10/06/13 08:33:50
A
10/06/13 08:33:50
F
10/06/13 08:33:50
A
10/06/13 08:33:50
F
10/06/13 08:33:50
A
10/06/13 08:33:50
F
10/06/13 08:34:02
A
10/06/13 08:34:02
F
10/06/13 08:34:02
A
10/06/13 08:34:02
F
10/06/13 08:34:45
D
call: DLL_PROCESS_ATTACH
10/06/13 08:34:45
A
10/06/13 08:34:45
D
call: DLL_PROCESS_DETACH
10/06/13 08:35:04
D
call: DLL_PROCESS_ATTACH
10/06/13 08:35:14
A
10/06/13 08:35:14
F
10/06/13 08:35:14
A
10/06/13 08:35:14
F
10/06/13 08:35:59
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:02
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:05
A
10/06/13 08:36:05
D
call: DLL_PROCESS_DETACH
10/06/13 08:36:05
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:11
A
10/06/13 08:36:11
D
call: DLL_PROCESS_DETACH
10/06/13 08:36:13
A
10/06/13 08:36:13
D
call: DLL_PROCESS_DETACH
10/06/13 08:36:47
A
10/06/13 08:36:47
D
call: DLL_PROCESS_DETACH
10/06/13 08:36:51
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:54
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:55
A
10/06/13 08:36:55
D
call: DLL_PROCESS_DETACH
10/06/13 08:36:56
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:56
D
call: DLL_PROCESS_ATTACH
10/06/13 08:36:56
A
10/06/13 08:36:56
D

-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for

call: DLL_PROCESS_DETACH
10/06/13 08:36:58
D
call: DLL_PROCESS_ATTACH
10/06/13 08:37:03
D
call: DLL_PROCESS_ATTACH
10/06/13 08:37:04
A
10/06/13 08:37:04
D
call: DLL_PROCESS_DETACH
10/06/13 08:37:23
A
10/06/13 08:37:23
A
10/06/13 08:37:50
D
call: DLL_PROCESS_ATTACH
10/06/13 08:38:42
A
10/06/13 08:38:42
D
call: DLL_PROCESS_DETACH
10/06/13 08:38:46
A
10/06/13 08:38:46
D
call: DLL_PROCESS_DETACH
10/06/13 08:39:23
A
10/06/13 08:39:23
A
10/06/13 08:39:26
D
call: DLL_PROCESS_ATTACH
10/06/13 08:39:28
D
call: DLL_PROCESS_ATTACH
10/06/13 08:39:34
A
10/06/13 08:39:34
D
call: DLL_PROCESS_DETACH
10/06/13 08:39:43
A
10/06/13 08:39:43
D
call: DLL_PROCESS_DETACH
10/06/13 08:39:53
A
10/06/13 08:39:53
F
10/06/13 08:39:53
A
10/06/13 08:39:53
F
10/06/13 08:40:34
D
call: DLL_PROCESS_ATTACH
10/06/13 08:40:37
D
call: DLL_PROCESS_ATTACH
10/06/13 08:40:43
A
10/06/13 08:40:43
D
call: DLL_PROCESS_DETACH
10/06/13 08:40:48
D
call: DLL_PROCESS_ATTACH
10/06/13 08:40:52
D
call: DLL_PROCESS_ATTACH
10/06/13 08:41:04
D
call: DLL_PROCESS_ATTACH
10/06/13 08:41:05
A
10/06/13 08:41:05
D
call: DLL_PROCESS_ATTACH
10/06/13 08:41:05
D
call: DLL_PROCESS_DETACH
10/06/13 08:41:07
A
10/06/13 08:41:07
D
call: DLL_PROCESS_DETACH
10/06/13 08:41:13
A
10/06/13 08:41:13
D
call: DLL_PROCESS_DETACH
10/06/13 08:41:18
A
10/06/13 08:41:18
A

Enter DllMain -> Handle: 1829437440 - Reason for


Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback

10/06/13 08:41:24
A
10/06/13 08:41:24
A
10/06/13 08:41:29
A
10/06/13 08:41:29
F
10/06/13 08:41:29
A
10/06/13 08:41:29
F
10/06/13 08:41:48
D
call: DLL_PROCESS_ATTACH
10/06/13 08:41:48
D
call: DLL_PROCESS_ATTACH
10/06/13 08:41:53
A
10/06/13 08:44:49
D
call: DLL_PROCESS_ATTACH
10/06/13 08:44:49
A
10/06/13 08:44:49
D
call: DLL_PROCESS_DETACH
10/06/13 08:45:47
A
10/06/13 08:45:47
D
call: DLL_PROCESS_DETACH
10/06/13 08:45:59
A
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
A
11/06/13 18:56:45
A
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:45
A
11/06/13 18:56:45
D
call: DLL_PROCESS_DETACH
11/06/13 18:56:45
A
11/06/13 18:56:45
D
call: DLL_PROCESS_DETACH
11/06/13 18:56:45
A
11/06/13 18:56:45
D
call: DLL_PROCESS_DETACH
11/06/13 18:56:45
D

-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1829437440 - Reason for
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1829437440 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for

call: DLL_PROCESS_ATTACH
11/06/13 18:56:48
D
call: DLL_PROCESS_ATTACH
11/06/13 18:56:48
A
11/06/13 18:56:48
D
call: DLL_PROCESS_DETACH
11/06/13 18:57:03
A
11/06/13 18:57:03
D
call: DLL_PROCESS_DETACH
11/06/13 18:57:38
A
11/06/13 18:57:38
D
call: DLL_PROCESS_DETACH
11/06/13 18:58:36
D
call: DLL_PROCESS_ATTACH
11/06/13 18:58:39
D
call: DLL_PROCESS_ATTACH
11/06/13 18:58:41
D
call: DLL_PROCESS_ATTACH
11/06/13 18:58:43
A
11/06/13 18:58:43
D
call: DLL_PROCESS_DETACH
11/06/13 18:58:46
D
call: DLL_PROCESS_ATTACH
11/06/13 18:58:46
A
11/06/13 18:58:46
D
call: DLL_PROCESS_DETACH
11/06/13 18:58:47
A
11/06/13 18:58:47
R
11/06/13 18:58:48
A
11/06/13 18:58:48
R
11/06/13 18:58:48
A
11/06/13 18:58:48
A
11/06/13 18:58:49
D
call: DLL_PROCESS_ATTACH
11/06/13 18:58:53
D
call: DLL_PROCESS_ATTACH
11/06/13 18:58:54
A
11/06/13 18:58:54
D
call: DLL_PROCESS_DETACH
11/06/13 18:59:01
A
11/06/13 18:59:01
F
11/06/13 18:59:01
A
11/06/13 18:59:01
F
11/06/13 18:59:01
A
11/06/13 18:59:01
F
11/06/13 18:59:31
D
call: DLL_PROCESS_ATTACH
11/06/13 18:59:43
D
call: DLL_PROCESS_ATTACH
11/06/13 18:59:47
D
call: DLL_PROCESS_ATTACH
11/06/13 18:59:53
A
11/06/13 18:59:53
D
call: DLL_PROCESS_DETACH
11/06/13 18:59:58
A
11/06/13 18:59:58
D
call: DLL_PROCESS_DETACH
11/06/13 19:00:11
D
call: DLL_PROCESS_ATTACH
11/06/13 19:00:14
D

Enter DllMain -> Handle: 1782775808 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for

call: DLL_PROCESS_ATTACH
11/06/13 19:00:20
A
11/06/13 19:00:20
D
call: DLL_PROCESS_DETACH
11/06/13 19:00:53
A
11/06/13 19:00:53
D
call: DLL_PROCESS_DETACH
11/06/13 19:01:03
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:10
A
11/06/13 19:01:10
A
11/06/13 19:01:15
A
11/06/13 19:01:15
A
11/06/13 19:01:36
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:36
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:37
A
11/06/13 19:01:37
D
call: DLL_PROCESS_DETACH
11/06/13 19:01:39
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:39
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:39
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:39
A
11/06/13 19:01:39
A
11/06/13 19:01:39
A
11/06/13 19:01:39
D
call: DLL_PROCESS_ATTACH
11/06/13 19:01:40
A
11/06/13 19:01:40
D
call: DLL_PROCESS_DETACH
11/06/13 19:01:41
A
11/06/13 19:01:41
A
11/06/13 19:01:45
A
11/06/13 19:01:46
A
11/06/13 19:01:46
D
call: DLL_PROCESS_DETACH
11/06/13 19:01:46
A
11/06/13 19:01:46
D
call: DLL_PROCESS_DETACH
11/06/13 19:03:28
D
call: DLL_PROCESS_ATTACH
11/06/13 19:03:37
A
11/06/13 19:03:37
D
call: DLL_PROCESS_DETACH
11/06/13 19:04:28
A
11/06/13 19:04:28
F
11/06/13 19:04:28
A
11/06/13 19:04:28
F
11/06/13 19:04:28
A
11/06/13 19:04:28
F
11/06/13 19:05:41
A
11/06/13 19:05:41
F
11/06/13 19:05:41
A
11/06/13 19:05:41
F
11/06/13 19:06:25
D
call: DLL_PROCESS_ATTACH

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1782775808 - Reason for

11/06/13 19:06:28
D
call: DLL_PROCESS_ATTACH
11/06/13 19:06:31
A
11/06/13 19:06:31
D
call: DLL_PROCESS_DETACH
11/06/13 19:06:34
D
call: DLL_PROCESS_ATTACH
11/06/13 19:06:37
D
call: DLL_PROCESS_ATTACH
11/06/13 19:06:40
A
11/06/13 19:06:40
D
call: DLL_PROCESS_DETACH
11/06/13 19:06:44
A
11/06/13 19:06:44
A
11/06/13 19:06:47
D
call: DLL_PROCESS_ATTACH
11/06/13 19:07:17
A
11/06/13 19:07:17
A
11/06/13 19:07:28
D
call: DLL_PROCESS_ATTACH
11/06/13 19:07:34
A
11/06/13 19:07:34
D
call: DLL_PROCESS_DETACH
11/06/13 19:07:36
D
call: DLL_PROCESS_ATTACH
11/06/13 19:07:42
A
11/06/13 19:07:42
D
call: DLL_PROCESS_DETACH
11/06/13 19:08:05
A
11/06/13 19:08:05
D
call: DLL_PROCESS_DETACH
11/06/13 19:08:15
D
call: DLL_PROCESS_ATTACH
11/06/13 19:08:16
A
11/06/13 19:08:16
D
call: DLL_PROCESS_DETACH
11/06/13 19:08:19
D
call: DLL_PROCESS_ATTACH
11/06/13 19:08:23
D
call: DLL_PROCESS_ATTACH
11/06/13 19:08:24
A
11/06/13 19:08:24
D
call: DLL_PROCESS_DETACH
11/06/13 19:08:26
A
11/06/13 19:08:26
D
call: DLL_PROCESS_DETACH
11/06/13 19:09:20
D
call: DLL_PROCESS_ATTACH
11/06/13 19:09:25
D
call: DLL_PROCESS_ATTACH
11/06/13 19:09:27
A
11/06/13 19:09:27
D
call: DLL_PROCESS_DETACH
11/06/13 19:09:27
A
11/06/13 19:09:27
D
call: DLL_PROCESS_DETACH
11/06/13 19:09:29
A
11/06/13 19:09:29
D
call: DLL_PROCESS_DETACH
11/06/13 19:09:30
D

Enter DllMain -> Handle: 1782775808 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for

call: DLL_PROCESS_ATTACH
11/06/13 19:09:32
D
call: DLL_PROCESS_ATTACH
11/06/13 19:09:32
D
call: DLL_PROCESS_ATTACH
11/06/13 19:09:32
A
11/06/13 19:09:32
D
call: DLL_PROCESS_DETACH
11/06/13 19:09:34
A
11/06/13 19:09:34
F
11/06/13 19:09:34
A
11/06/13 19:09:34
F
11/06/13 19:09:34
A
11/06/13 19:09:34
F
11/06/13 19:09:37
A
11/06/13 19:09:37
D
call: DLL_PROCESS_DETACH
11/06/13 19:10:53
A
11/06/13 19:10:53
F
11/06/13 19:10:53
A
11/06/13 19:10:53
F
11/06/13 19:10:53
A
11/06/13 19:10:53
F
11/06/13 19:11:04
A
11/06/13 19:11:04
F
11/06/13 19:11:04
A
11/06/13 19:11:04
F
11/06/13 19:11:31
D
call: DLL_PROCESS_ATTACH
11/06/13 19:11:31
D
call: DLL_PROCESS_ATTACH
11/06/13 19:11:36
A
11/06/13 19:11:40
A
11/06/13 19:11:40
F
11/06/13 19:11:40
A
11/06/13 19:11:40
F
11/06/13 19:16:31
A
11/06/13 19:16:31
D
call: DLL_PROCESS_DETACH
11/06/13 19:35:52
A
11/06/13 19:35:52
F
11/06/13 19:35:52
A
11/06/13 19:35:52
F
11/06/13 19:36:35
A
11/06/13 19:36:35
F
11/06/13 19:36:35
A
11/06/13 19:36:35
F
11/06/13 19:36:47
D
call: DLL_PROCESS_ATTACH
11/06/13 19:36:47
A
11/06/13 19:36:47
D
call: DLL_PROCESS_DETACH
11/06/13 19:37:44
A
11/06/13 19:37:44
F
11/06/13 19:37:44
A
11/06/13 19:37:44
F
11/06/13 19:37:51
A
11/06/13 19:37:51
F
11/06/13 19:37:51
A
11/06/13 19:37:51
F

Enter DllMain -> Handle: 1782775808 - Reason for


Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1

11/06/13 19:37:52
A
11/06/13 19:37:52
F
11/06/13 19:37:52
A
11/06/13 19:37:52
F
11/06/13 19:37:59
D
call: DLL_PROCESS_ATTACH
11/06/13 19:38:01
D
call: DLL_PROCESS_ATTACH
11/06/13 19:38:05
A
11/06/13 19:38:05
D
call: DLL_PROCESS_DETACH
11/06/13 19:38:18
D
call: DLL_PROCESS_ATTACH
11/06/13 19:38:24
A
11/06/13 19:38:24
D
call: DLL_PROCESS_DETACH
11/06/13 19:38:27
A
11/06/13 19:38:27
A
11/06/13 19:42:27
A
11/06/13 19:42:27
F
11/06/13 19:42:27
A
11/06/13 19:42:27
F
11/06/13 19:42:30
D
call: DLL_PROCESS_ATTACH
11/06/13 19:42:37
A
11/06/13 19:42:37
D
call: DLL_PROCESS_DETACH
11/06/13 19:51:16
A
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:36
A
13/06/13 19:59:36
A
13/06/13 19:59:36
A
13/06/13 19:59:36
A
13/06/13 19:59:37
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:37
A
13/06/13 19:59:37
D
call: DLL_PROCESS_DETACH
13/06/13 19:59:37
D

-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1782775808 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1739653120 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for

call: DLL_PROCESS_ATTACH
13/06/13 19:59:37
D
call: DLL_PROCESS_ATTACH
13/06/13 19:59:37
A
13/06/13 19:59:37
D
call: DLL_PROCESS_DETACH
13/06/13 19:59:37
A
13/06/13 19:59:37
D
call: DLL_PROCESS_DETACH
13/06/13 19:59:45
A
13/06/13 19:59:45
D
call: DLL_PROCESS_DETACH
13/06/13 19:59:55
D
call: DLL_PROCESS_ATTACH
13/06/13 20:00:09
D
call: DLL_PROCESS_ATTACH
13/06/13 20:00:13
D
call: DLL_PROCESS_ATTACH
13/06/13 20:00:13
A
13/06/13 20:00:13
D
call: DLL_PROCESS_DETACH
13/06/13 20:00:14
A
13/06/13 20:00:21
A
13/06/13 20:00:21
D
call: DLL_PROCESS_DETACH
13/06/13 20:00:23
A
13/06/13 20:00:23
D
call: DLL_PROCESS_DETACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
A
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
A
08/07/13 22:26:53
A
08/07/13 22:26:53
A

Enter DllMain -> Handle: 1739653120 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1739653120 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1739653120 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback

08/07/13 22:26:53
A
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
D
call: DLL_PROCESS_ATTACH
08/07/13 22:26:53
A
08/07/13 22:26:53
D
call: DLL_PROCESS_DETACH
08/07/13 22:26:53
A
08/07/13 22:26:53
D
call: DLL_PROCESS_DETACH
08/07/13 22:27:11
A
08/07/13 22:27:11
D
call: DLL_PROCESS_DETACH
08/07/13 22:27:46
A
08/07/13 22:27:46
D
call: DLL_PROCESS_DETACH
08/07/13 22:29:00
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:01
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:09
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:15
A
08/07/13 22:29:15
D
call: DLL_PROCESS_DETACH
08/07/13 22:29:17
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:18
A
08/07/13 22:29:18
D
call: DLL_PROCESS_DETACH
08/07/13 22:29:23
A
08/07/13 22:29:23
D
call: DLL_PROCESS_DETACH
08/07/13 22:29:24
A
08/07/13 22:29:28
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:30
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:30
D
call: DLL_PROCESS_ATTACH
08/07/13 22:29:30
A
08/07/13 22:29:30
D
call: DLL_PROCESS_DETACH
08/07/13 22:29:32
A
08/07/13 22:29:32
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D

-> CreateDCWCallback
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1839529984 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for

call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
A
22/08/13 19:59:50
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:50
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:51
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:51
A
22/08/13 19:59:51
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:51
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:52
A
22/08/13 19:59:52
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:53
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:53
A
22/08/13 19:59:53
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:57
A
22/08/13 19:59:57
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:58
A
22/08/13 19:59:58
A
22/08/13 19:59:58
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:59
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:59
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:59
D
call: DLL_PROCESS_ATTACH
22/08/13 19:59:59
A
22/08/13 19:59:59
A
22/08/13 19:59:59
D
call: DLL_PROCESS_DETACH
22/08/13 19:59:59
A
22/08/13 19:59:59
D
call: DLL_PROCESS_DETACH
22/08/13 20:00:07
D
call: DLL_PROCESS_ATTACH
22/08/13 20:00:07
D
call: DLL_PROCESS_ATTACH
22/08/13 20:00:07
A

Enter DllMain -> Handle: 1831534592 - Reason for


Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback

22/08/13 20:00:07
D
call: DLL_PROCESS_DETACH
22/08/13 20:00:07
A
22/08/13 20:00:07
D
call: DLL_PROCESS_DETACH
22/08/13 20:00:07
A
22/08/13 20:00:07
D
call: DLL_PROCESS_DETACH
22/08/13 20:00:40
A
22/08/13 20:00:40
D
call: DLL_PROCESS_DETACH
22/08/13 20:02:35
D
call: DLL_PROCESS_ATTACH
22/08/13 20:02:57
A
22/08/13 20:02:57
D
call: DLL_PROCESS_DETACH
22/08/13 20:03:54
A
22/08/13 20:03:54
D
call: DLL_PROCESS_DETACH
22/08/13 20:04:25
D
call: DLL_PROCESS_ATTACH
22/08/13 20:04:27
A
22/08/13 20:04:27
F
22/08/13 20:04:27
A
22/08/13 20:04:27
F
22/08/13 20:04:28
A
22/08/13 20:04:28
F
22/08/13 20:04:28
A
22/08/13 20:04:28
F
22/08/13 20:04:29
A
22/08/13 20:04:29
F
22/08/13 20:04:29
A
22/08/13 20:04:29
F
22/08/13 20:04:41
D
call: DLL_PROCESS_ATTACH
22/08/13 20:04:41
A
22/08/13 20:04:41
D
call: DLL_PROCESS_DETACH
22/08/13 20:05:01
D
call: DLL_PROCESS_ATTACH
22/08/13 20:05:01
D
call: DLL_PROCESS_ATTACH
22/08/13 20:05:01
A
22/08/13 20:05:01
D
call: DLL_PROCESS_DETACH
22/08/13 20:05:29
D
call: DLL_PROCESS_ATTACH
22/08/13 20:05:33
D
call: DLL_PROCESS_ATTACH
22/08/13 20:05:33
A
22/08/13 20:05:33
A
22/08/13 20:05:33
A
22/08/13 20:05:33
A
22/08/13 20:05:33
D
call: DLL_PROCESS_ATTACH
22/08/13 20:05:36
A
22/08/13 20:05:36
D
call: DLL_PROCESS_DETACH
22/08/13 20:05:48
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1831534592 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1831534592 - Reason for

22/08/13 20:05:59
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:06:03
A
-> CreateDCWCallback
22/08/13 20:06:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:20
O
Impresora Final: CyberClient
22/08/13 20:06:20
V
DevMode Impresora: CyberClient
22/08/13 20:06:20
V
DevMode Copies: 1
22/08/13 20:06:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:20
O
Impresora Final: CyberClient
22/08/13 20:06:20
V
DevMode Impresora: CyberClient
22/08/13 20:06:20
V
DevMode Copies: 1
22/08/13 20:06:20
A
-> CreateDCWCallback
22/08/13 20:06:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:20
O
Impresora Final: CyberClient
22/08/13 20:06:20
V
DevMode Impresora: CyberClient
22/08/13 20:06:20
V
DevMode Copies: 1
22/08/13 20:06:20
F
lpszDevice: CyberClient
22/08/13 20:06:20
V
DevMode Impresora: CyberClient
22/08/13 20:06:20
V
DevMode Copies: 1
22/08/13 20:06:21
A
-> CreateDCWCallback
22/08/13 20:06:21
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:21
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:21
O
Impresora Final: CyberClient
22/08/13 20:06:21
V
DevMode Impresora: CyberClient
22/08/13 20:06:21
V
DevMode Copies: 1
22/08/13 20:06:21
F
lpszDevice: CyberClient
22/08/13 20:06:21
V
DevMode Impresora: CyberClient
22/08/13 20:06:21
V
DevMode Copies: 1
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
O
Impresora Final: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
A
-> CreateDCWCallback
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
O
Impresora Final: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
F
lpszDevice: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
A
-> StartDocWCallback
22/08/13 20:06:23
N
DATOS EN PN ======================
22/08/13 20:06:23
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:06:23
N
API: StartDocW
22/08/13 20:06:23
N
Copies: 1
22/08/13 20:06:23
N
Doc: Microsoft Word - Documento1
22/08/13 20:06:23
N
Printer: CyberClient
22/08/13 20:06:23
N
Pages: 0
22/08/13 20:06:23
N
Params: 1831760030
22/08/13 20:06:23
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 119607032; doc: "Microsoft Word - Documento1"|||Cyb
erClient|||||||||
22/08/13 20:06:23
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:06:23
I
** Impresion NO excluida
22/08/13 20:06:23
I
Answer: 255
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack

22/08/13 20:06:23
O
Impresora Final: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
A
-> CreateDCWCallback
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
O
Impresora Final: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
F
lpszDevice: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
O
Impresora Final: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
A
-> ResetDCWCallback
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:23
O
Impresora Final: CyberClient
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:23
V
DevMode Impresora: CyberClient
22/08/13 20:06:23
V
DevMode Copies: 1
22/08/13 20:06:24
A
-> EndPageCallback
22/08/13 20:06:24
A
-> EndPageCallback
22/08/13 20:06:24
A
-> EndDocCallback
22/08/13 20:06:24
N
DATOS EN PN ======================
22/08/13 20:06:24
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:06:24
N
API: EndDoc
22/08/13 20:06:24
N
Copies: 1
22/08/13 20:06:24
N
Doc: Microsoft Word - Documento1
22/08/13 20:06:24
N
Printer: CyberClient
22/08/13 20:06:24
N
Pages: 2
22/08/13 20:06:24
N
Params: 1831760030
22/08/13 20:06:24
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 119607032; doc: "Microsoft Word - Documento1"|||CyberC
lient|||2|||2|||1
22/08/13 20:06:24
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:06:24
I
** Impresion NO excluida
22/08/13 20:06:24
I
Answer: 255
22/08/13 20:06:25
A
-> NtTerminateProcessCallback
22/08/13 20:06:25
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:06:34
A
-> CreateDCWCallback
22/08/13 20:06:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:34
O
Impresora Final: CyberClient
22/08/13 20:06:34
V
DevMode Impresora: CyberClient
22/08/13 20:06:34
V
DevMode Copies: 1
22/08/13 20:06:34
F
lpszDevice: CyberClient
22/08/13 20:06:34
V
DevMode Impresora: CyberClient
22/08/13 20:06:34
V
DevMode Copies: 1
22/08/13 20:06:34
A
-> CreateDCWCallback
22/08/13 20:06:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:34
O
Impresora Final: CyberClient
22/08/13 20:06:34
V
DevMode Impresora: CyberClient
22/08/13 20:06:34
V
DevMode Copies: 1

22/08/13 20:06:34
F
lpszDevice: CyberClient
22/08/13 20:06:34
V
DevMode Impresora: CyberClient
22/08/13 20:06:34
V
DevMode Copies: 1
22/08/13 20:06:34
A
-> CreateDCWCallback
22/08/13 20:06:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:34
O
Impresora Final: CyberClient
22/08/13 20:06:34
V
DevMode Impresora: CyberClient
22/08/13 20:06:34
V
DevMode Copies: 1
22/08/13 20:06:34
F
lpszDevice: CyberClient
22/08/13 20:06:34
V
DevMode Impresora: CyberClient
22/08/13 20:06:34
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
O
Impresora Final: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> CreateDCWCallback
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
O
Impresora Final: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
F
lpszDevice: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> StartDocWCallback
22/08/13 20:06:58
N
DATOS EN PN ======================
22/08/13 20:06:58
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:06:58
N
API: StartDocW
22/08/13 20:06:58
N
Copies: 1
22/08/13 20:06:58
N
Doc: Microsoft Word - Documento1
22/08/13 20:06:58
N
Printer: CyberClient
22/08/13 20:06:58
N
Pages: 0
22/08/13 20:06:58
N
Params: 1831760030
22/08/13 20:06:58
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1679888109; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:06:58
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:06:58
I
** Impresion NO excluida
22/08/13 20:06:58
I
Answer: 255
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
O
Impresora Final: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> CreateDCWCallback
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
O
Impresora Final: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
F
lpszDevice: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
O
Impresora Final: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> ResetDCWCallback
22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack

22/08/13 20:06:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:06:58
O
Impresora Final: CyberClient
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
V
DevMode Impresora: CyberClient
22/08/13 20:06:58
V
DevMode Copies: 1
22/08/13 20:06:58
A
-> EndPageCallback
22/08/13 20:06:58
A
-> EndPageCallback
22/08/13 20:06:58
A
-> EndDocCallback
22/08/13 20:06:58
N
DATOS EN PN ======================
22/08/13 20:06:58
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:06:58
N
API: EndDoc
22/08/13 20:06:58
N
Copies: 1
22/08/13 20:06:58
N
Doc: Microsoft Word - Documento1
22/08/13 20:06:58
N
Printer: CyberClient
22/08/13 20:06:58
N
Pages: 2
22/08/13 20:06:58
N
Params: 1831760030
22/08/13 20:06:58
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1679888109; doc: "Microsoft Word - Documento1"|||Cyber
Client|||3|||2|||1
22/08/13 20:06:58
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:06:58
I
** Impresion NO excluida
22/08/13 20:06:58
I
Answer: 255
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
O
Impresora Final: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
A
-> CreateDCWCallback
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
O
Impresora Final: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
F
lpszDevice: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
A
-> StartDocWCallback
22/08/13 20:07:18
N
DATOS EN PN ======================
22/08/13 20:07:18
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:18
N
API: StartDocW
22/08/13 20:07:18
N
Copies: 1
22/08/13 20:07:18
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:18
N
Printer: CyberClient
22/08/13 20:07:18
N
Pages: 0
22/08/13 20:07:18
N
Params: 1831760030
22/08/13 20:07:18
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 69275102; doc: "Microsoft Word - Documento1"|||Cybe
rClient|||||||||
22/08/13 20:07:18
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:18
I
** Impresion NO excluida
22/08/13 20:07:18
I
Answer: 255
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
O
Impresora Final: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
A
-> CreateDCWCallback
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack

22/08/13 20:07:18
O
Impresora Final: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
F
lpszDevice: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
O
Impresora Final: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
A
-> ResetDCWCallback
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:18
O
Impresora Final: CyberClient
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
V
DevMode Impresora: CyberClient
22/08/13 20:07:18
V
DevMode Copies: 1
22/08/13 20:07:18
A
-> EndPageCallback
22/08/13 20:07:18
A
-> EndPageCallback
22/08/13 20:07:18
A
-> EndDocCallback
22/08/13 20:07:18
N
DATOS EN PN ======================
22/08/13 20:07:18
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:18
N
API: EndDoc
22/08/13 20:07:18
N
Copies: 1
22/08/13 20:07:18
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:18
N
Printer: CyberClient
22/08/13 20:07:18
N
Pages: 2
22/08/13 20:07:18
N
Params: 1831760030
22/08/13 20:07:18
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 69275102; doc: "Microsoft Word - Documento1"|||CyberCl
ient|||4|||2|||1
22/08/13 20:07:18
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:18
I
** Impresion NO excluida
22/08/13 20:07:18
I
Answer: 255
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
O
Impresora Final: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
A
-> CreateDCWCallback
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
O
Impresora Final: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
F
lpszDevice: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
A
-> StartDocWCallback
22/08/13 20:07:30
N
DATOS EN PN ======================
22/08/13 20:07:30
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:30
N
API: StartDocW
22/08/13 20:07:30
N
Copies: 1
22/08/13 20:07:30
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:30
N
Printer: CyberClient
22/08/13 20:07:30
N
Pages: 0
22/08/13 20:07:30
N
Params: 1831760030
22/08/13 20:07:30
F
VB: C:\Program Files\Microsoft Office\Office14\W

INWORD.EXE|||StartDocW|||dc: 320933713; doc: "Microsoft Word - Documento1"|||Cyb


erClient|||||||||
22/08/13 20:07:30
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:30
I
** Impresion NO excluida
22/08/13 20:07:30
I
Answer: 255
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
O
Impresora Final: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
A
-> CreateDCWCallback
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
O
Impresora Final: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
F
lpszDevice: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
O
Impresora Final: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
A
-> ResetDCWCallback
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:30
O
Impresora Final: CyberClient
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
V
DevMode Impresora: CyberClient
22/08/13 20:07:30
V
DevMode Copies: 1
22/08/13 20:07:30
A
-> EndPageCallback
22/08/13 20:07:30
A
-> EndPageCallback
22/08/13 20:07:30
A
-> EndDocCallback
22/08/13 20:07:30
N
DATOS EN PN ======================
22/08/13 20:07:30
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:30
N
API: EndDoc
22/08/13 20:07:30
N
Copies: 1
22/08/13 20:07:30
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:30
N
Printer: CyberClient
22/08/13 20:07:30
N
Pages: 2
22/08/13 20:07:30
N
Params: 1831760030
22/08/13 20:07:30
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 320933713; doc: "Microsoft Word - Documento1"|||CyberC
lient|||5|||2|||1
22/08/13 20:07:30
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:30
I
** Impresion NO excluida
22/08/13 20:07:30
I
Answer: 255
22/08/13 20:07:41
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:41
O
Impresora Final: CyberClient
22/08/13 20:07:41
V
DevMode Impresora: CyberClient
22/08/13 20:07:41
V
DevMode Copies: 1
22/08/13 20:07:41
A
-> CreateDCWCallback
22/08/13 20:07:41
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:41
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:41
O
Impresora Final: CyberClient
22/08/13 20:07:41
V
DevMode Impresora: CyberClient
22/08/13 20:07:41
V
DevMode Copies: 1
22/08/13 20:07:41
F
lpszDevice: CyberClient
22/08/13 20:07:41
V
DevMode Impresora: CyberClient

22/08/13 20:07:41
V
DevMode Copies: 1
22/08/13 20:07:41
A
-> StartDocWCallback
22/08/13 20:07:41
N
DATOS EN PN ======================
22/08/13 20:07:41
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:41
N
API: StartDocW
22/08/13 20:07:41
N
Copies: 1
22/08/13 20:07:41
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:41
N
Printer: CyberClient
22/08/13 20:07:41
N
Pages: 0
22/08/13 20:07:41
N
Params: 1831760030
22/08/13 20:07:41
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 3340832640; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:07:41
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:41
I
** Impresion NO excluida
22/08/13 20:07:42
I
Answer: 255
22/08/13 20:07:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:42
O
Impresora Final: CyberClient
22/08/13 20:07:42
V
DevMode Impresora: CyberClient
22/08/13 20:07:42
V
DevMode Copies: 1
22/08/13 20:07:42
A
-> CreateDCWCallback
22/08/13 20:07:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:42
O
Impresora Final: CyberClient
22/08/13 20:07:42
V
DevMode Impresora: CyberClient
22/08/13 20:07:42
V
DevMode Copies: 1
22/08/13 20:07:42
F
lpszDevice: CyberClient
22/08/13 20:07:42
V
DevMode Impresora: CyberClient
22/08/13 20:07:42
V
DevMode Copies: 1
22/08/13 20:07:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:42
O
Impresora Final: CyberClient
22/08/13 20:07:42
V
DevMode Impresora: CyberClient
22/08/13 20:07:42
V
DevMode Copies: 1
22/08/13 20:07:42
A
-> ResetDCWCallback
22/08/13 20:07:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:42
O
Impresora Final: CyberClient
22/08/13 20:07:42
V
DevMode Impresora: CyberClient
22/08/13 20:07:42
V
DevMode Copies: 1
22/08/13 20:07:42
V
DevMode Impresora: CyberClient
22/08/13 20:07:42
V
DevMode Copies: 1
22/08/13 20:07:42
A
-> EndPageCallback
22/08/13 20:07:42
A
-> EndPageCallback
22/08/13 20:07:42
A
-> EndDocCallback
22/08/13 20:07:42
N
DATOS EN PN ======================
22/08/13 20:07:42
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:42
N
API: EndDoc
22/08/13 20:07:42
N
Copies: 1
22/08/13 20:07:42
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:42
N
Printer: CyberClient
22/08/13 20:07:42
N
Pages: 2
22/08/13 20:07:42
N
Params: 1831760030
22/08/13 20:07:42
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 3340832640; doc: "Microsoft Word - Documento1"|||Cyber
Client|||6|||2|||1
22/08/13 20:07:42
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:42
I
** Impresion NO excluida
22/08/13 20:07:42
I
Answer: 255

22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
O
Impresora Final: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
A
-> CreateDCWCallback
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
O
Impresora Final: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
F
lpszDevice: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
A
-> StartDocWCallback
22/08/13 20:07:53
N
DATOS EN PN ======================
22/08/13 20:07:53
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:07:53
N
API: StartDocW
22/08/13 20:07:53
N
Copies: 1
22/08/13 20:07:53
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:53
N
Printer: CyberClient
22/08/13 20:07:53
N
Pages: 0
22/08/13 20:07:53
N
Params: 1831760030
22/08/13 20:07:53
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 3743485877; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:07:53
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:53
I
** Impresion NO excluida
22/08/13 20:07:53
I
Answer: 255
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
O
Impresora Final: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
A
-> CreateDCWCallback
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
O
Impresora Final: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
F
lpszDevice: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
O
Impresora Final: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
A
-> ResetDCWCallback
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
A
-> DocumentPropertiesWCallBack
22/08/13 20:07:53
O
Impresora Final: CyberClient
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
V
DevMode Impresora: CyberClient
22/08/13 20:07:53
V
DevMode Copies: 1
22/08/13 20:07:53
A
-> EndPageCallback
22/08/13 20:07:53
A
-> EndPageCallback
22/08/13 20:07:53
A
-> EndDocCallback
22/08/13 20:07:53
N
DATOS EN PN ======================
22/08/13 20:07:53
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE

22/08/13 20:07:53
N
API: EndDoc
22/08/13 20:07:53
N
Copies: 1
22/08/13 20:07:53
N
Doc: Microsoft Word - Documento1
22/08/13 20:07:53
N
Printer: CyberClient
22/08/13 20:07:53
N
Pages: 2
22/08/13 20:07:53
N
Params: 1831760030
22/08/13 20:07:53
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 3743485877; doc: "Microsoft Word - Documento1"|||Cyber
Client|||7|||2|||1
22/08/13 20:07:53
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:07:53
I
** Impresion NO excluida
22/08/13 20:07:53
I
Answer: 255
22/08/13 20:08:01
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:01
O
Impresora Final: CyberClient
22/08/13 20:08:01
V
DevMode Impresora: CyberClient
22/08/13 20:08:01
V
DevMode Copies: 1
22/08/13 20:08:01
A
-> CreateDCWCallback
22/08/13 20:08:01
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:01
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:01
O
Impresora Final: CyberClient
22/08/13 20:08:01
V
DevMode Impresora: CyberClient
22/08/13 20:08:01
V
DevMode Copies: 1
22/08/13 20:08:01
F
lpszDevice: CyberClient
22/08/13 20:08:01
V
DevMode Impresora: CyberClient
22/08/13 20:08:01
V
DevMode Copies: 1
22/08/13 20:08:01
A
-> StartDocWCallback
22/08/13 20:08:01
N
DATOS EN PN ======================
22/08/13 20:08:01
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:08:01
N
API: StartDocW
22/08/13 20:08:01
N
Copies: 1
22/08/13 20:08:01
N
Doc: Microsoft Word - Documento1
22/08/13 20:08:01
N
Printer: CyberClient
22/08/13 20:08:01
N
Pages: 0
22/08/13 20:08:01
N
Params: 1831760030
22/08/13 20:08:01
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 2233536534; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:08:01
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:08:01
I
** Impresion NO excluida
22/08/13 20:08:02
I
Answer: 255
22/08/13 20:08:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:02
O
Impresora Final: CyberClient
22/08/13 20:08:02
V
DevMode Impresora: CyberClient
22/08/13 20:08:02
V
DevMode Copies: 1
22/08/13 20:08:02
A
-> CreateDCWCallback
22/08/13 20:08:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:02
O
Impresora Final: CyberClient
22/08/13 20:08:02
V
DevMode Impresora: CyberClient
22/08/13 20:08:02
V
DevMode Copies: 1
22/08/13 20:08:02
F
lpszDevice: CyberClient
22/08/13 20:08:02
V
DevMode Impresora: CyberClient
22/08/13 20:08:02
V
DevMode Copies: 1
22/08/13 20:08:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:02
O
Impresora Final: CyberClient
22/08/13 20:08:02
V
DevMode Impresora: CyberClient
22/08/13 20:08:02
V
DevMode Copies: 1
22/08/13 20:08:02
A
-> ResetDCWCallback
22/08/13 20:08:02
A
-> DocumentPropertiesWCallBack

22/08/13 20:08:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:02
O
Impresora Final: CyberClient
22/08/13 20:08:02
V
DevMode Impresora: CyberClient
22/08/13 20:08:02
V
DevMode Copies: 1
22/08/13 20:08:02
V
DevMode Impresora: CyberClient
22/08/13 20:08:02
V
DevMode Copies: 1
22/08/13 20:08:02
A
-> EndPageCallback
22/08/13 20:08:02
A
-> EndPageCallback
22/08/13 20:08:02
A
-> EndDocCallback
22/08/13 20:08:02
N
DATOS EN PN ======================
22/08/13 20:08:02
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:08:02
N
API: EndDoc
22/08/13 20:08:02
N
Copies: 1
22/08/13 20:08:02
N
Doc: Microsoft Word - Documento1
22/08/13 20:08:02
N
Printer: CyberClient
22/08/13 20:08:02
N
Pages: 2
22/08/13 20:08:02
N
Params: 1831760030
22/08/13 20:08:02
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 2233536534; doc: "Microsoft Word - Documento1"|||Cyber
Client|||8|||2|||1
22/08/13 20:08:02
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:08:02
I
** Impresion NO excluida
22/08/13 20:08:02
I
Answer: 255
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
O
Impresora Final: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
A
-> CreateDCWCallback
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
O
Impresora Final: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
F
lpszDevice: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
A
-> StartDocWCallback
22/08/13 20:08:13
N
DATOS EN PN ======================
22/08/13 20:08:13
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:08:13
N
API: StartDocW
22/08/13 20:08:13
N
Copies: 1
22/08/13 20:08:13
N
Doc: Microsoft Word - Documento1
22/08/13 20:08:13
N
Printer: CyberClient
22/08/13 20:08:13
N
Pages: 0
22/08/13 20:08:13
N
Params: 1831760030
22/08/13 20:08:13
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1109462977; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:08:13
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:08:13
I
** Impresion NO excluida
22/08/13 20:08:13
I
Answer: 255
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
O
Impresora Final: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
A
-> CreateDCWCallback
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack

22/08/13 20:08:13
O
Impresora Final: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
F
lpszDevice: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
O
Impresora Final: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
A
-> ResetDCWCallback
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:13
O
Impresora Final: CyberClient
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
V
DevMode Impresora: CyberClient
22/08/13 20:08:13
V
DevMode Copies: 1
22/08/13 20:08:13
A
-> EndPageCallback
22/08/13 20:08:13
A
-> EndPageCallback
22/08/13 20:08:13
A
-> EndDocCallback
22/08/13 20:08:13
N
DATOS EN PN ======================
22/08/13 20:08:13
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:08:13
N
API: EndDoc
22/08/13 20:08:13
N
Copies: 1
22/08/13 20:08:13
N
Doc: Microsoft Word - Documento1
22/08/13 20:08:13
N
Printer: CyberClient
22/08/13 20:08:13
N
Pages: 2
22/08/13 20:08:13
N
Params: 1831760030
22/08/13 20:08:13
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1109462977; doc: "Microsoft Word - Documento1"|||Cyber
Client|||9|||2|||1
22/08/13 20:08:13
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:08:13
I
** Impresion NO excluida
22/08/13 20:08:13
I
Answer: 255
22/08/13 20:08:24
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:24
O
Impresora Final: CyberClient
22/08/13 20:08:24
V
DevMode Impresora: CyberClient
22/08/13 20:08:24
V
DevMode Copies: 1
22/08/13 20:08:24
A
-> CreateDCWCallback
22/08/13 20:08:24
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:24
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:24
O
Impresora Final: CyberClient
22/08/13 20:08:24
V
DevMode Impresora: CyberClient
22/08/13 20:08:24
V
DevMode Copies: 1
22/08/13 20:08:24
F
lpszDevice: CyberClient
22/08/13 20:08:24
V
DevMode Impresora: CyberClient
22/08/13 20:08:24
V
DevMode Copies: 1
22/08/13 20:08:24
A
-> StartDocWCallback
22/08/13 20:08:24
N
DATOS EN PN ======================
22/08/13 20:08:24
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:08:24
N
API: StartDocW
22/08/13 20:08:24
N
Copies: 1
22/08/13 20:08:24
N
Doc: Microsoft Word - Documento1
22/08/13 20:08:24
N
Printer: CyberClient
22/08/13 20:08:24
N
Pages: 0
22/08/13 20:08:24
N
Params: 1831760030
22/08/13 20:08:24
F
VB: C:\Program Files\Microsoft Office\Office14\W

INWORD.EXE|||StartDocW|||dc: 2350976846; doc: "Microsoft Word - Documento1"|||Cy


berClient|||||||||
22/08/13 20:08:24
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:08:24
I
** Impresion NO excluida
22/08/13 20:08:25
I
Answer: 255
22/08/13 20:08:25
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:25
O
Impresora Final: CyberClient
22/08/13 20:08:25
V
DevMode Impresora: CyberClient
22/08/13 20:08:25
V
DevMode Copies: 1
22/08/13 20:08:25
A
-> CreateDCWCallback
22/08/13 20:08:25
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:25
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:25
O
Impresora Final: CyberClient
22/08/13 20:08:25
V
DevMode Impresora: CyberClient
22/08/13 20:08:25
V
DevMode Copies: 1
22/08/13 20:08:25
F
lpszDevice: CyberClient
22/08/13 20:08:25
V
DevMode Impresora: CyberClient
22/08/13 20:08:25
V
DevMode Copies: 1
22/08/13 20:08:25
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:25
O
Impresora Final: CyberClient
22/08/13 20:08:25
V
DevMode Impresora: CyberClient
22/08/13 20:08:25
V
DevMode Copies: 1
22/08/13 20:08:25
A
-> ResetDCWCallback
22/08/13 20:08:25
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:25
A
-> DocumentPropertiesWCallBack
22/08/13 20:08:25
O
Impresora Final: CyberClient
22/08/13 20:08:25
V
DevMode Impresora: CyberClient
22/08/13 20:08:25
V
DevMode Copies: 1
22/08/13 20:08:25
V
DevMode Impresora: CyberClient
22/08/13 20:08:25
V
DevMode Copies: 1
22/08/13 20:08:25
A
-> EndPageCallback
22/08/13 20:08:25
A
-> EndPageCallback
22/08/13 20:08:25
A
-> EndDocCallback
22/08/13 20:08:25
N
DATOS EN PN ======================
22/08/13 20:08:25
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:08:25
N
API: EndDoc
22/08/13 20:08:25
N
Copies: 1
22/08/13 20:08:25
N
Doc: Microsoft Word - Documento1
22/08/13 20:08:25
N
Printer: CyberClient
22/08/13 20:08:25
N
Pages: 2
22/08/13 20:08:25
N
Params: 1831760030
22/08/13 20:08:25
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 2350976846; doc: "Microsoft Word - Documento1"|||Cyber
Client|||10|||2|||1
22/08/13 20:08:25
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:08:25
I
** Impresion NO excluida
22/08/13 20:08:25
I
Answer: 255
22/08/13 20:09:38
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:09:38
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:09:43
A
-> NtTerminateProcessCallback
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
O
Impresora Final: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
A
-> CreateDCWCallback
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack

22/08/13 20:12:02
O
Impresora Final: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
F
lpszDevice: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
A
-> StartDocWCallback
22/08/13 20:12:02
N
DATOS EN PN ======================
22/08/13 20:12:02
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:12:02
N
API: StartDocW
22/08/13 20:12:02
N
Copies: 1
22/08/13 20:12:02
N
Doc: Microsoft Word - Documento1
22/08/13 20:12:02
N
Printer: CyberClient
22/08/13 20:12:02
N
Pages: 0
22/08/13 20:12:02
N
Params: 1831760030
22/08/13 20:12:02
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 2032209948; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:12:02
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:12:02
I
** Impresion NO excluida
22/08/13 20:12:02
I
Answer: 255
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
O
Impresora Final: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
A
-> CreateDCWCallback
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
O
Impresora Final: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
F
lpszDevice: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
O
Impresora Final: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
A
-> ResetDCWCallback
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
A
-> DocumentPropertiesWCallBack
22/08/13 20:12:02
O
Impresora Final: CyberClient
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
V
DevMode Impresora: CyberClient
22/08/13 20:12:02
V
DevMode Copies: 1
22/08/13 20:12:02
A
-> EndPageCallback
22/08/13 20:12:02
A
-> EndPageCallback
22/08/13 20:12:02
A
-> EndDocCallback
22/08/13 20:12:02
N
DATOS EN PN ======================
22/08/13 20:12:02
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:12:02
N
API: EndDoc
22/08/13 20:12:02
N
Copies: 1
22/08/13 20:12:02
N
Doc: Microsoft Word - Documento1
22/08/13 20:12:02
N
Printer: CyberClient
22/08/13 20:12:02
N
Pages: 2
22/08/13 20:12:02
N
Params: 1831760030
22/08/13 20:12:02
F
VB: C:\Program Files\Microsoft Office\Office14\W

INWORD.EXE|||EndDoc|||dc: 2032209948; doc: "Microsoft Word - Documento1"|||Cyber


Client|||11|||2|||1
22/08/13 20:12:02
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:12:02
I
** Impresion NO excluida
22/08/13 20:12:02
I
Answer: 255
22/08/13 20:12:36
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:12:36
A
-> NtTerminateProcessCallback
22/08/13 20:12:36
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:13:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:44
O
Impresora Final: CyberClient
22/08/13 20:13:44
V
DevMode Impresora: CyberClient
22/08/13 20:13:44
V
DevMode Copies: 1
22/08/13 20:13:44
A
-> CreateDCWCallback
22/08/13 20:13:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:44
O
Impresora Final: CyberClient
22/08/13 20:13:44
V
DevMode Impresora: CyberClient
22/08/13 20:13:44
V
DevMode Copies: 1
22/08/13 20:13:44
F
lpszDevice: CyberClient
22/08/13 20:13:44
V
DevMode Impresora: CyberClient
22/08/13 20:13:44
V
DevMode Copies: 1
22/08/13 20:13:44
A
-> StartDocWCallback
22/08/13 20:13:44
N
DATOS EN PN ======================
22/08/13 20:13:44
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:13:44
N
API: StartDocW
22/08/13 20:13:44
N
Copies: 1
22/08/13 20:13:44
N
Doc: Microsoft Word - Documento1
22/08/13 20:13:44
N
Printer: CyberClient
22/08/13 20:13:44
N
Pages: 0
22/08/13 20:13:44
N
Params: 1831760030
22/08/13 20:13:44
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 3743485561; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:13:44
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:13:44
I
** Impresion NO excluida
22/08/13 20:13:45
I
Answer: 255
22/08/13 20:13:45
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:45
O
Impresora Final: CyberClient
22/08/13 20:13:45
V
DevMode Impresora: CyberClient
22/08/13 20:13:45
V
DevMode Copies: 1
22/08/13 20:13:45
A
-> CreateDCWCallback
22/08/13 20:13:45
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:45
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:45
O
Impresora Final: CyberClient
22/08/13 20:13:45
V
DevMode Impresora: CyberClient
22/08/13 20:13:45
V
DevMode Copies: 1
22/08/13 20:13:45
F
lpszDevice: CyberClient
22/08/13 20:13:45
V
DevMode Impresora: CyberClient
22/08/13 20:13:45
V
DevMode Copies: 1
22/08/13 20:13:45
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:45
O
Impresora Final: CyberClient
22/08/13 20:13:45
V
DevMode Impresora: CyberClient
22/08/13 20:13:45
V
DevMode Copies: 1
22/08/13 20:13:45
A
-> ResetDCWCallback
22/08/13 20:13:45
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:45
A
-> DocumentPropertiesWCallBack
22/08/13 20:13:45
O
Impresora Final: CyberClient

22/08/13 20:13:45
V
DevMode Impresora: CyberClient
22/08/13 20:13:45
V
DevMode Copies: 1
22/08/13 20:13:45
V
DevMode Impresora: CyberClient
22/08/13 20:13:45
V
DevMode Copies: 1
22/08/13 20:13:45
A
-> EndPageCallback
22/08/13 20:13:45
A
-> EndPageCallback
22/08/13 20:13:45
A
-> EndDocCallback
22/08/13 20:13:45
N
DATOS EN PN ======================
22/08/13 20:13:45
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:13:45
N
API: EndDoc
22/08/13 20:13:45
N
Copies: 1
22/08/13 20:13:45
N
Doc: Microsoft Word - Documento1
22/08/13 20:13:45
N
Printer: CyberClient
22/08/13 20:13:45
N
Pages: 2
22/08/13 20:13:45
N
Params: 1831760030
22/08/13 20:13:45
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 3743485561; doc: "Microsoft Word - Documento1"|||Cyber
Client|||12|||2|||1
22/08/13 20:13:45
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:13:45
I
** Impresion NO excluida
22/08/13 20:13:45
I
Answer: 255
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
O
Impresora Final: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
A
-> CreateDCWCallback
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
O
Impresora Final: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
F
lpszDevice: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
A
-> StartDocWCallback
22/08/13 20:14:17
N
DATOS EN PN ======================
22/08/13 20:14:17
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:14:17
N
API: StartDocW
22/08/13 20:14:17
N
Copies: 1
22/08/13 20:14:17
N
Doc: Microsoft Word - Documento1
22/08/13 20:14:17
N
Printer: CyberClient
22/08/13 20:14:17
N
Pages: 0
22/08/13 20:14:17
N
Params: 1831760030
22/08/13 20:14:17
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 3206614540; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:14:17
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:14:17
I
** Impresion NO excluida
22/08/13 20:14:17
I
Answer: 255
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
O
Impresora Final: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
A
-> CreateDCWCallback
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
O
Impresora Final: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient

22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
F
lpszDevice: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
O
Impresora Final: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
A
-> ResetDCWCallback
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
A
-> DocumentPropertiesWCallBack
22/08/13 20:14:17
O
Impresora Final: CyberClient
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
V
DevMode Impresora: CyberClient
22/08/13 20:14:17
V
DevMode Copies: 1
22/08/13 20:14:17
A
-> EndPageCallback
22/08/13 20:14:17
A
-> EndPageCallback
22/08/13 20:14:17
A
-> EndDocCallback
22/08/13 20:14:17
N
DATOS EN PN ======================
22/08/13 20:14:17
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:14:17
N
API: EndDoc
22/08/13 20:14:17
N
Copies: 1
22/08/13 20:14:17
N
Doc: Microsoft Word - Documento1
22/08/13 20:14:17
N
Printer: CyberClient
22/08/13 20:14:17
N
Pages: 2
22/08/13 20:14:17
N
Params: 1831760030
22/08/13 20:14:17
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 3206614540; doc: "Microsoft Word - Documento1"|||Cyber
Client|||13|||2|||1
22/08/13 20:14:17
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:14:17
I
** Impresion NO excluida
22/08/13 20:14:17
I
Answer: 255
22/08/13 20:14:36
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:14:41
A
-> NtTerminateProcessCallback
22/08/13 20:15:10
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:10
O
Impresora Final: CyberClient
22/08/13 20:15:10
V
DevMode Impresora: CyberClient
22/08/13 20:15:10
V
DevMode Copies: 1
22/08/13 20:15:10
A
-> CreateDCWCallback
22/08/13 20:15:10
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:10
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:10
O
Impresora Final: CyberClient
22/08/13 20:15:10
V
DevMode Impresora: CyberClient
22/08/13 20:15:10
V
DevMode Copies: 1
22/08/13 20:15:10
F
lpszDevice: CyberClient
22/08/13 20:15:10
V
DevMode Impresora: CyberClient
22/08/13 20:15:10
V
DevMode Copies: 1
22/08/13 20:15:11
A
-> StartDocWCallback
22/08/13 20:15:11
N
DATOS EN PN ======================
22/08/13 20:15:11
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:15:11
N
API: StartDocW
22/08/13 20:15:11
N
Copies: 1
22/08/13 20:15:11
N
Doc: Microsoft Word - Documento1
22/08/13 20:15:11
N
Printer: CyberClient
22/08/13 20:15:11
N
Pages: 0
22/08/13 20:15:11
N
Params: 1831760030

22/08/13 20:15:11
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1445007329; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:15:11
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:15:11
I
** Impresion NO excluida
22/08/13 20:15:11
I
Answer: 255
22/08/13 20:15:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:11
O
Impresora Final: CyberClient
22/08/13 20:15:11
V
DevMode Impresora: CyberClient
22/08/13 20:15:11
V
DevMode Copies: 1
22/08/13 20:15:11
A
-> CreateDCWCallback
22/08/13 20:15:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:11
O
Impresora Final: CyberClient
22/08/13 20:15:11
V
DevMode Impresora: CyberClient
22/08/13 20:15:11
V
DevMode Copies: 1
22/08/13 20:15:11
F
lpszDevice: CyberClient
22/08/13 20:15:11
V
DevMode Impresora: CyberClient
22/08/13 20:15:11
V
DevMode Copies: 1
22/08/13 20:15:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:11
O
Impresora Final: CyberClient
22/08/13 20:15:11
V
DevMode Impresora: CyberClient
22/08/13 20:15:11
V
DevMode Copies: 1
22/08/13 20:15:11
A
-> ResetDCWCallback
22/08/13 20:15:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:15:11
O
Impresora Final: CyberClient
22/08/13 20:15:11
V
DevMode Impresora: CyberClient
22/08/13 20:15:11
V
DevMode Copies: 1
22/08/13 20:15:11
V
DevMode Impresora: CyberClient
22/08/13 20:15:11
V
DevMode Copies: 1
22/08/13 20:15:11
A
-> EndPageCallback
22/08/13 20:15:11
A
-> EndPageCallback
22/08/13 20:15:11
A
-> EndDocCallback
22/08/13 20:15:11
N
DATOS EN PN ======================
22/08/13 20:15:11
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:15:11
N
API: EndDoc
22/08/13 20:15:11
N
Copies: 1
22/08/13 20:15:11
N
Doc: Microsoft Word - Documento1
22/08/13 20:15:11
N
Printer: CyberClient
22/08/13 20:15:11
N
Pages: 2
22/08/13 20:15:11
N
Params: 1831760030
22/08/13 20:15:11
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1445007329; doc: "Microsoft Word - Documento1"|||Cyber
Client|||14|||2|||1
22/08/13 20:15:11
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:15:11
I
** Impresion NO excluida
22/08/13 20:15:11
I
Answer: 255
22/08/13 20:15:19
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:15:19
A
-> NtTerminateProcessCallback
22/08/13 20:15:19
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:15:20
A
-> NtTerminateProcessCallback
22/08/13 20:15:20
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:15:20
D
Enter DllMain -> Handle: 1831534592 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:15:26
A
-> NtTerminateProcessCallback

22/08/13 20:15:26
D
call: DLL_PROCESS_DETACH
22/08/13 20:15:34
D
call: DLL_PROCESS_ATTACH
22/08/13 20:15:35
A
22/08/13 20:15:46
A
22/08/13 20:15:46
D
call: DLL_PROCESS_DETACH
22/08/13 20:15:48
A
22/08/13 20:15:48
D
call: DLL_PROCESS_DETACH
22/08/13 20:15:49
A
22/08/13 20:15:49
D
call: DLL_PROCESS_DETACH
22/08/13 20:15:49
A
22/08/13 20:15:49
D
call: DLL_PROCESS_DETACH
22/08/13 20:15:52
A
22/08/13 20:15:52
D
call: DLL_PROCESS_DETACH
22/08/13 20:15:52
A
22/08/13 20:15:52
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:04
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:04
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:05
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:07
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:07
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:07
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:08
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:08
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:08
D

Enter DllMain -> Handle: 1831534592 - Reason for


Enter DllMain -> Handle: 1831534592 - Reason for
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1831534592 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for

call: DLL_PROCESS_ATTACH
22/08/13 20:18:08
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:08
A
22/08/13 20:18:08
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:09
A
22/08/13 20:18:09
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:09
A
22/08/13 20:18:09
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:09
A
22/08/13 20:18:09
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:09
A
22/08/13 20:18:09
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:12
A
22/08/13 20:18:12
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:15
A
22/08/13 20:18:15
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:15
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:22
A
22/08/13 20:18:23
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:24
A
22/08/13 20:18:30
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:33
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:33
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:33
A
22/08/13 20:18:33
D
call: DLL_PROCESS_ATTACH
22/08/13 20:18:33
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:33
A
22/08/13 20:18:33
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:33
A
22/08/13 20:18:33
D
call: DLL_PROCESS_DETACH
22/08/13 20:18:41
A
22/08/13 20:18:41
A
22/08/13 20:18:41
O
22/08/13 20:18:41
V
22/08/13 20:18:41
V
22/08/13 20:18:42
A
22/08/13 20:18:42
O
22/08/13 20:18:42
V
22/08/13 20:18:42
V
22/08/13 20:18:42
A
22/08/13 20:18:42
A
22/08/13 20:18:42
A
22/08/13 20:18:42
O

Enter DllMain -> Handle: 1869479936 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> CreateDCWCallback
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient

22/08/13 20:18:42
V
DevMode Impresora: CyberClient
22/08/13 20:18:42
V
DevMode Copies: 1
22/08/13 20:18:42
F
lpszDevice: CyberClient
22/08/13 20:18:42
V
DevMode Impresora: CyberClient
22/08/13 20:18:42
V
DevMode Copies: 1
22/08/13 20:18:42
A
-> CreateDCWCallback
22/08/13 20:18:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:42
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:42
O
Impresora Final: CyberClient
22/08/13 20:18:42
V
DevMode Impresora: CyberClient
22/08/13 20:18:42
V
DevMode Copies: 1
22/08/13 20:18:42
F
lpszDevice: CyberClient
22/08/13 20:18:42
V
DevMode Impresora: CyberClient
22/08/13 20:18:42
V
DevMode Copies: 1
22/08/13 20:18:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:43
O
Impresora Final: CyberClient
22/08/13 20:18:43
V
DevMode Impresora: CyberClient
22/08/13 20:18:43
V
DevMode Copies: 1
22/08/13 20:18:43
A
-> CreateDCWCallback
22/08/13 20:18:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:43
O
Impresora Final: CyberClient
22/08/13 20:18:43
V
DevMode Impresora: CyberClient
22/08/13 20:18:43
V
DevMode Copies: 1
22/08/13 20:18:43
F
lpszDevice: CyberClient
22/08/13 20:18:43
V
DevMode Impresora: CyberClient
22/08/13 20:18:43
V
DevMode Copies: 1
22/08/13 20:18:43
A
-> StartDocWCallback
22/08/13 20:18:43
N
DATOS EN PN ======================
22/08/13 20:18:43
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:18:43
N
API: StartDocW
22/08/13 20:18:43
N
Copies: 1
22/08/13 20:18:43
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:18:43
N
Printer: CyberClient
22/08/13 20:18:43
N
Pages: 0
22/08/13 20:18:43
N
Params: 1869705374
22/08/13 20:18:43
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 740363991; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:18:43
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:18:43
I
** Impresion NO excluida
22/08/13 20:18:44
I
Answer: 255
22/08/13 20:18:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:44
O
Impresora Final: CyberClient
22/08/13 20:18:44
V
DevMode Impresora: CyberClient
22/08/13 20:18:44
V
DevMode Copies: 1
22/08/13 20:18:44
A
-> CreateDCWCallback
22/08/13 20:18:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:44
O
Impresora Final: CyberClient
22/08/13 20:18:44
V
DevMode Impresora: CyberClient
22/08/13 20:18:44
V
DevMode Copies: 1
22/08/13 20:18:44
F
lpszDevice: CyberClient
22/08/13 20:18:44
V
DevMode Impresora: CyberClient
22/08/13 20:18:44
V
DevMode Copies: 1
22/08/13 20:18:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:44
O
Impresora Final: CyberClient
22/08/13 20:18:44
V
DevMode Impresora: CyberClient

22/08/13 20:18:44
V
DevMode Copies: 1
22/08/13 20:18:44
A
-> ResetDCWCallback
22/08/13 20:18:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:44
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:44
O
Impresora Final: CyberClient
22/08/13 20:18:44
V
DevMode Impresora: CyberClient
22/08/13 20:18:44
V
DevMode Copies: 1
22/08/13 20:18:44
V
DevMode Impresora: CyberClient
22/08/13 20:18:44
V
DevMode Copies: 1
22/08/13 20:18:44
A
-> EndPageCallback
22/08/13 20:18:44
A
-> EndPageCallback
22/08/13 20:18:44
A
-> EndDocCallback
22/08/13 20:18:44
N
DATOS EN PN ======================
22/08/13 20:18:44
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:18:44
N
API: EndDoc
22/08/13 20:18:44
N
Copies: 1
22/08/13 20:18:44
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:18:44
N
Printer: CyberClient
22/08/13 20:18:44
N
Pages: 2
22/08/13 20:18:44
N
Params: 1869705374
22/08/13 20:18:44
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 740363991; doc: "Microsoft Word - Informtica es una cie
ncia que estudia mtodos"|||CyberClient|||2|||2|||1
22/08/13 20:18:44
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:18:44
I
** Impresion NO excluida
22/08/13 20:18:44
I
Answer: 255
22/08/13 20:18:52
A
-> CreateDCWCallback
22/08/13 20:18:52
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:52
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:52
O
Impresora Final: CyberClient
22/08/13 20:18:52
V
DevMode Impresora: CyberClient
22/08/13 20:18:52
V
DevMode Copies: 1
22/08/13 20:18:52
F
lpszDevice: CyberClient
22/08/13 20:18:52
V
DevMode Impresora: CyberClient
22/08/13 20:18:52
V
DevMode Copies: 1
22/08/13 20:18:52
A
-> CreateDCWCallback
22/08/13 20:18:52
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:52
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:52
O
Impresora Final: CyberClient
22/08/13 20:18:52
V
DevMode Impresora: CyberClient
22/08/13 20:18:52
V
DevMode Copies: 1
22/08/13 20:18:52
F
lpszDevice: CyberClient
22/08/13 20:18:52
V
DevMode Impresora: CyberClient
22/08/13 20:18:52
V
DevMode Copies: 1
22/08/13 20:18:52
A
-> CreateDCWCallback
22/08/13 20:18:52
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:52
A
-> DocumentPropertiesWCallBack
22/08/13 20:18:52
O
Impresora Final: CyberClient
22/08/13 20:18:52
V
DevMode Impresora: CyberClient
22/08/13 20:18:52
V
DevMode Copies: 1
22/08/13 20:18:52
F
lpszDevice: CyberClient
22/08/13 20:18:52
V
DevMode Impresora: CyberClient
22/08/13 20:18:52
V
DevMode Copies: 1
22/08/13 20:18:58
A
-> NtTerminateProcessCallback
22/08/13 20:18:58
D
Enter DllMain -> Handle: 1869479936 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
O
Impresora Final: CyberClient

22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
A
-> CreateDCWCallback
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
O
Impresora Final: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
F
lpszDevice: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
A
-> StartDocWCallback
22/08/13 20:19:03
N
DATOS EN PN ======================
22/08/13 20:19:03
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:19:03
N
API: StartDocW
22/08/13 20:19:03
N
Copies: 1
22/08/13 20:19:03
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:19:03
N
Printer: CyberClient
22/08/13 20:19:03
N
Pages: 0
22/08/13 20:19:03
N
Params: 1869705374
22/08/13 20:19:03
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1377898154; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:19:03
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:19:03
I
** Impresion NO excluida
22/08/13 20:19:03
I
Answer: 255
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
O
Impresora Final: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
A
-> CreateDCWCallback
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
O
Impresora Final: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
F
lpszDevice: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
O
Impresora Final: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
A
-> ResetDCWCallback
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
A
-> DocumentPropertiesWCallBack
22/08/13 20:19:03
O
Impresora Final: CyberClient
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
V
DevMode Impresora: CyberClient
22/08/13 20:19:03
V
DevMode Copies: 1
22/08/13 20:19:03
A
-> EndPageCallback
22/08/13 20:19:03
A
-> EndPageCallback
22/08/13 20:19:03
A
-> EndDocCallback
22/08/13 20:19:03
N
DATOS EN PN ======================
22/08/13 20:19:03
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:19:03
N
API: EndDoc

22/08/13 20:19:03
N
Copies: 1
22/08/13 20:19:03
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:19:03
N
Printer: CyberClient
22/08/13 20:19:03
N
Pages: 2
22/08/13 20:19:03
N
Params: 1869705374
22/08/13 20:19:03
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1377898154; doc: "Microsoft Word - Informtica es una ci
encia que estudia mtodos"|||CyberClient|||3|||2|||1
22/08/13 20:19:03
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:19:03
I
** Impresion NO excluida
22/08/13 20:19:03
I
Answer: 255
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
O
Impresora Final: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
A
-> CreateDCWCallback
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
O
Impresora Final: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
F
lpszDevice: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
A
-> StartDocWCallback
22/08/13 20:20:19
N
DATOS EN PN ======================
22/08/13 20:20:19
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:20:19
N
API: StartDocW
22/08/13 20:20:19
N
Copies: 1
22/08/13 20:20:19
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:20:19
N
Printer: CyberClient
22/08/13 20:20:19
N
Pages: 0
22/08/13 20:20:19
N
Params: 1869705374
22/08/13 20:20:19
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1159794360; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:20:19
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:20:19
I
** Impresion NO excluida
22/08/13 20:20:19
I
Answer: 255
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
O
Impresora Final: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
A
-> CreateDCWCallback
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
O
Impresora Final: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
F
lpszDevice: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
O
Impresora Final: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
A
-> ResetDCWCallback

22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:19
O
Impresora Final: CyberClient
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
V
DevMode Impresora: CyberClient
22/08/13 20:20:19
V
DevMode Copies: 1
22/08/13 20:20:19
A
-> EndPageCallback
22/08/13 20:20:19
A
-> EndPageCallback
22/08/13 20:20:19
A
-> EndDocCallback
22/08/13 20:20:19
N
DATOS EN PN ======================
22/08/13 20:20:19
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:20:19
N
API: EndDoc
22/08/13 20:20:19
N
Copies: 1
22/08/13 20:20:19
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:20:19
N
Printer: CyberClient
22/08/13 20:20:19
N
Pages: 2
22/08/13 20:20:19
N
Params: 1869705374
22/08/13 20:20:19
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1159794360; doc: "Microsoft Word - Informtica es una ci
encia que estudia mtodos"|||CyberClient|||4|||2|||1
22/08/13 20:20:19
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:20:19
I
** Impresion NO excluida
22/08/13 20:20:19
I
Answer: 255
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
O
Impresora Final: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
A
-> CreateDCWCallback
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
O
Impresora Final: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
F
lpszDevice: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
A
-> StartDocWCallback
22/08/13 20:20:43
N
DATOS EN PN ======================
22/08/13 20:20:43
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:20:43
N
API: StartDocW
22/08/13 20:20:43
N
Copies: 1
22/08/13 20:20:43
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:20:43
N
Printer: CyberClient
22/08/13 20:20:43
N
Pages: 0
22/08/13 20:20:43
N
Params: 1869705374
22/08/13 20:20:43
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 35720838; doc: "Microsoft Word - Informtica es una c
iencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:20:43
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:20:43
I
** Impresion NO excluida
22/08/13 20:20:43
I
Answer: 255
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
O
Impresora Final: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1

22/08/13 20:20:43
A
-> CreateDCWCallback
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
O
Impresora Final: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
F
lpszDevice: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
O
Impresora Final: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
A
-> ResetDCWCallback
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
A
-> DocumentPropertiesWCallBack
22/08/13 20:20:43
O
Impresora Final: CyberClient
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
V
DevMode Impresora: CyberClient
22/08/13 20:20:43
V
DevMode Copies: 1
22/08/13 20:20:43
A
-> EndPageCallback
22/08/13 20:20:43
A
-> EndPageCallback
22/08/13 20:20:43
A
-> EndDocCallback
22/08/13 20:20:43
N
DATOS EN PN ======================
22/08/13 20:20:43
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:20:43
N
API: EndDoc
22/08/13 20:20:43
N
Copies: 1
22/08/13 20:20:43
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:20:43
N
Printer: CyberClient
22/08/13 20:20:43
N
Pages: 2
22/08/13 20:20:43
N
Params: 1869705374
22/08/13 20:20:43
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 35720838; doc: "Microsoft Word - Informtica es una cien
cia que estudia mtodos"|||CyberClient|||5|||2|||1
22/08/13 20:20:43
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:20:43
I
** Impresion NO excluida
22/08/13 20:20:43
I
Answer: 255
22/08/13 20:20:58
D
Enter DllMain -> Handle: 1869479936 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:20:59
D
Enter DllMain -> Handle: 1869479936 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:21:04
A
-> NtTerminateProcessCallback
22/08/13 20:21:08
D
Enter DllMain -> Handle: 1869479936 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:21:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:20
O
Impresora Final: CyberClient
22/08/13 20:21:20
V
DevMode Impresora: CyberClient
22/08/13 20:21:20
V
DevMode Copies: 1
22/08/13 20:21:20
A
-> CreateDCWCallback
22/08/13 20:21:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:20
O
Impresora Final: CyberClient
22/08/13 20:21:20
V
DevMode Impresora: CyberClient
22/08/13 20:21:20
V
DevMode Copies: 1
22/08/13 20:21:20
F
lpszDevice: CyberClient
22/08/13 20:21:20
V
DevMode Impresora: CyberClient
22/08/13 20:21:20
V
DevMode Copies: 1

22/08/13 20:21:20
A
-> StartDocWCallback
22/08/13 20:21:20
N
DATOS EN PN ======================
22/08/13 20:21:20
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:21:20
N
API: StartDocW
22/08/13 20:21:20
N
Copies: 1
22/08/13 20:21:20
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:21:20
N
Printer: CyberClient
22/08/13 20:21:20
N
Pages: 0
22/08/13 20:21:20
N
Params: 1869705374
22/08/13 20:21:20
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 2065764249; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:21:20
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:21:20
I
** Impresion NO excluida
22/08/13 20:21:20
I
Answer: 255
22/08/13 20:21:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:20
O
Impresora Final: CyberClient
22/08/13 20:21:20
V
DevMode Impresora: CyberClient
22/08/13 20:21:20
V
DevMode Copies: 1
22/08/13 20:21:20
A
-> CreateDCWCallback
22/08/13 20:21:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:20
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:20
O
Impresora Final: CyberClient
22/08/13 20:21:20
V
DevMode Impresora: CyberClient
22/08/13 20:21:20
V
DevMode Copies: 1
22/08/13 20:21:21
F
lpszDevice: CyberClient
22/08/13 20:21:21
V
DevMode Impresora: CyberClient
22/08/13 20:21:21
V
DevMode Copies: 1
22/08/13 20:21:21
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:21
O
Impresora Final: CyberClient
22/08/13 20:21:21
V
DevMode Impresora: CyberClient
22/08/13 20:21:21
V
DevMode Copies: 1
22/08/13 20:21:21
A
-> ResetDCWCallback
22/08/13 20:21:21
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:21
A
-> DocumentPropertiesWCallBack
22/08/13 20:21:21
O
Impresora Final: CyberClient
22/08/13 20:21:21
V
DevMode Impresora: CyberClient
22/08/13 20:21:21
V
DevMode Copies: 1
22/08/13 20:21:21
V
DevMode Impresora: CyberClient
22/08/13 20:21:21
V
DevMode Copies: 1
22/08/13 20:21:21
A
-> EndPageCallback
22/08/13 20:21:21
A
-> EndPageCallback
22/08/13 20:21:21
A
-> EndDocCallback
22/08/13 20:21:21
N
DATOS EN PN ======================
22/08/13 20:21:21
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:21:21
N
API: EndDoc
22/08/13 20:21:21
N
Copies: 1
22/08/13 20:21:21
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:21:21
N
Printer: CyberClient
22/08/13 20:21:21
N
Pages: 2
22/08/13 20:21:21
N
Params: 1869705374
22/08/13 20:21:21
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 2065764249; doc: "Microsoft Word - Informtica es una ci
encia que estudia mtodos"|||CyberClient|||6|||2|||1
22/08/13 20:21:21
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:21:21
I
** Impresion NO excluida

22/08/13 20:21:21
I
22/08/13 20:21:33
A
22/08/13 20:21:33
D
call: DLL_PROCESS_DETACH
22/08/13 20:22:19
A
22/08/13 20:22:19
D
call: DLL_PROCESS_DETACH
22/08/13 20:22:38
A
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:28
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:29
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:29
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:29
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:29
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:29
A
22/08/13 20:23:29
D
call: DLL_PROCESS_DETACH
22/08/13 20:23:30
A
22/08/13 20:23:30
A
22/08/13 20:23:32
D
call: DLL_PROCESS_ATTACH
22/08/13 20:23:32
A
22/08/13 20:23:32
D
call: DLL_PROCESS_DETACH
22/08/13 20:23:46
A
22/08/13 20:23:46
D
call: DLL_PROCESS_DETACH
22/08/13 20:24:15
A
22/08/13 20:24:15
D
call: DLL_PROCESS_ATTACH

Answer: 255
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1869479936 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for

22/08/13 20:24:15
D
call: DLL_PROCESS_ATTACH
22/08/13 20:24:15
A
22/08/13 20:24:15
A
22/08/13 20:24:15
A
22/08/13 20:24:15
A
22/08/13 20:24:15
D
call: DLL_PROCESS_ATTACH
22/08/13 20:24:16
D
call: DLL_PROCESS_ATTACH
22/08/13 20:24:16
A
22/08/13 20:24:16
D
call: DLL_PROCESS_DETACH
22/08/13 20:24:16
A
22/08/13 20:24:16
D
call: DLL_PROCESS_DETACH
22/08/13 20:24:21
D
call: DLL_PROCESS_ATTACH
22/08/13 20:24:25
A
22/08/13 20:24:25
D
call: DLL_PROCESS_DETACH
22/08/13 20:24:27
D
call: DLL_PROCESS_ATTACH
22/08/13 20:24:27
A
22/08/13 20:24:27
A
22/08/13 20:24:27
D
call: DLL_PROCESS_DETACH
22/08/13 20:24:31
A
22/08/13 20:24:31
A
22/08/13 20:24:31
O
22/08/13 20:24:31
V
22/08/13 20:24:31
V
22/08/13 20:24:31
A
22/08/13 20:24:31
O
22/08/13 20:24:31
V
22/08/13 20:24:31
V
22/08/13 20:24:31
A
22/08/13 20:24:31
A
22/08/13 20:24:31
A
22/08/13 20:24:31
O
22/08/13 20:24:31
V
22/08/13 20:24:31
V
22/08/13 20:24:31
F
22/08/13 20:24:31
V
22/08/13 20:24:31
V
22/08/13 20:24:32
A
22/08/13 20:24:32
A
22/08/13 20:24:32
A
22/08/13 20:24:32
O
22/08/13 20:24:32
V
22/08/13 20:24:32
V
22/08/13 20:24:32
F
22/08/13 20:24:32
V
22/08/13 20:24:32
V
22/08/13 20:24:33
A
22/08/13 20:24:33
O
22/08/13 20:24:33
V
22/08/13 20:24:33
V
22/08/13 20:24:33
A
22/08/13 20:24:33
A

Enter DllMain -> Handle: 1909981184 - Reason for


-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
-> CreateDCWCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack

22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
O
Impresora Final: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
F
lpszDevice: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
A
-> StartDocWCallback
22/08/13 20:24:33
N
DATOS EN PN ======================
22/08/13 20:24:33
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:24:33
N
API: StartDocW
22/08/13 20:24:33
N
Copies: 1
22/08/13 20:24:33
N
Doc: Microsoft Word - Documento1
22/08/13 20:24:33
N
Printer: CyberClient
22/08/13 20:24:33
N
Pages: 0
22/08/13 20:24:33
N
Params: 1910206622
22/08/13 20:24:33
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 824249866; doc: "Microsoft Word - Documento1"|||Cyb
erClient|||||||||
22/08/13 20:24:33
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:24:33
I
** Impresion NO excluida
22/08/13 20:24:33
I
Answer: 255
22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
O
Impresora Final: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
A
-> CreateDCWCallback
22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
O
Impresora Final: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
F
lpszDevice: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
O
Impresora Final: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
A
-> ResetDCWCallback
22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:33
O
Impresora Final: CyberClient
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
V
DevMode Impresora: CyberClient
22/08/13 20:24:33
V
DevMode Copies: 1
22/08/13 20:24:33
A
-> EndPageCallback
22/08/13 20:24:33
A
-> EndDocCallback
22/08/13 20:24:33
N
DATOS EN PN ======================
22/08/13 20:24:33
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:24:33
N
API: EndDoc
22/08/13 20:24:33
N
Copies: 1
22/08/13 20:24:33
N
Doc: Microsoft Word - Documento1
22/08/13 20:24:33
N
Printer: CyberClient
22/08/13 20:24:33
N
Pages: 1
22/08/13 20:24:33
N
Params: 1910206622
22/08/13 20:24:33
F
VB: C:\Program Files\Microsoft Office\Office14\W

INWORD.EXE|||EndDoc|||dc: 824249866; doc: "Microsoft Word - Documento1"|||CyberC


lient|||2|||1|||1
22/08/13 20:24:33
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:24:33
I
** Impresion NO excluida
22/08/13 20:24:33
I
Answer: 255
22/08/13 20:24:39
A
-> CreateDCWCallback
22/08/13 20:24:39
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:39
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:39
O
Impresora Final: CyberClient
22/08/13 20:24:39
V
DevMode Impresora: CyberClient
22/08/13 20:24:39
V
DevMode Copies: 1
22/08/13 20:24:39
F
lpszDevice: CyberClient
22/08/13 20:24:39
V
DevMode Impresora: CyberClient
22/08/13 20:24:39
V
DevMode Copies: 1
22/08/13 20:24:39
A
-> CreateDCWCallback
22/08/13 20:24:39
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:39
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:39
O
Impresora Final: CyberClient
22/08/13 20:24:39
V
DevMode Impresora: CyberClient
22/08/13 20:24:39
V
DevMode Copies: 1
22/08/13 20:24:39
F
lpszDevice: CyberClient
22/08/13 20:24:39
V
DevMode Impresora: CyberClient
22/08/13 20:24:39
V
DevMode Copies: 1
22/08/13 20:24:39
A
-> CreateDCWCallback
22/08/13 20:24:39
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:39
A
-> DocumentPropertiesWCallBack
22/08/13 20:24:39
O
Impresora Final: CyberClient
22/08/13 20:24:39
V
DevMode Impresora: CyberClient
22/08/13 20:24:39
V
DevMode Copies: 1
22/08/13 20:24:39
F
lpszDevice: CyberClient
22/08/13 20:24:39
V
DevMode Impresora: CyberClient
22/08/13 20:24:39
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
O
Impresora Final: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> CreateDCWCallback
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
O
Impresora Final: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
F
lpszDevice: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> StartDocWCallback
22/08/13 20:25:32
N
DATOS EN PN ======================
22/08/13 20:25:32
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:25:32
N
API: StartDocW
22/08/13 20:25:32
N
Copies: 1
22/08/13 20:25:32
N
Doc: Microsoft Word - Documento1
22/08/13 20:25:32
N
Printer: CyberClient
22/08/13 20:25:32
N
Pages: 0
22/08/13 20:25:32
N
Params: 1910206622
22/08/13 20:25:32
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1277234686; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:25:32
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:25:32
I
** Impresion NO excluida

22/08/13 20:25:32
I
Answer: 255
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
O
Impresora Final: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> CreateDCWCallback
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
O
Impresora Final: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
F
lpszDevice: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
O
Impresora Final: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> ResetDCWCallback
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
A
-> DocumentPropertiesWCallBack
22/08/13 20:25:32
O
Impresora Final: CyberClient
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
V
DevMode Impresora: CyberClient
22/08/13 20:25:32
V
DevMode Copies: 1
22/08/13 20:25:32
A
-> EndPageCallback
22/08/13 20:25:32
A
-> EndDocCallback
22/08/13 20:25:32
N
DATOS EN PN ======================
22/08/13 20:25:32
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:25:32
N
API: EndDoc
22/08/13 20:25:32
N
Copies: 1
22/08/13 20:25:32
N
Doc: Microsoft Word - Documento1
22/08/13 20:25:32
N
Printer: CyberClient
22/08/13 20:25:32
N
Pages: 1
22/08/13 20:25:32
N
Params: 1910206622
22/08/13 20:25:32
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1277234686; doc: "Microsoft Word - Documento1"|||Cyber
Client|||3|||1|||1
22/08/13 20:25:32
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:25:32
I
** Impresion NO excluida
22/08/13 20:25:32
I
Answer: 255
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
O
Impresora Final: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
A
-> CreateDCWCallback
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
O
Impresora Final: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
F
lpszDevice: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
A
-> StartDocWCallback
22/08/13 20:26:56
N
DATOS EN PN ======================
22/08/13 20:26:56
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE

22/08/13 20:26:56
N
API: StartDocW
22/08/13 20:26:56
N
Copies: 1
22/08/13 20:26:56
N
Doc: Microsoft Word - Documento1
22/08/13 20:26:56
N
Printer: CyberClient
22/08/13 20:26:56
N
Pages: 0
22/08/13 20:26:56
N
Params: 1910206622
22/08/13 20:26:56
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 2451639717; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:26:56
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:26:56
I
** Impresion NO excluida
22/08/13 20:26:56
I
Answer: 255
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
O
Impresora Final: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
A
-> CreateDCWCallback
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
O
Impresora Final: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
F
lpszDevice: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
O
Impresora Final: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
A
-> ResetDCWCallback
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
A
-> DocumentPropertiesWCallBack
22/08/13 20:26:56
O
Impresora Final: CyberClient
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
V
DevMode Impresora: CyberClient
22/08/13 20:26:56
V
DevMode Copies: 1
22/08/13 20:26:56
A
-> EndPageCallback
22/08/13 20:26:56
A
-> EndDocCallback
22/08/13 20:26:56
N
DATOS EN PN ======================
22/08/13 20:26:56
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:26:56
N
API: EndDoc
22/08/13 20:26:56
N
Copies: 1
22/08/13 20:26:56
N
Doc: Microsoft Word - Documento1
22/08/13 20:26:56
N
Printer: CyberClient
22/08/13 20:26:56
N
Pages: 1
22/08/13 20:26:56
N
Params: 1910206622
22/08/13 20:26:56
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 2451639717; doc: "Microsoft Word - Documento1"|||Cyber
Client|||4|||1|||1
22/08/13 20:26:56
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:26:56
I
** Impresion NO excluida
22/08/13 20:26:56
I
Answer: 255
22/08/13 20:27:10
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:10
O
Impresora Final: CyberClient
22/08/13 20:27:10
V
DevMode Impresora: CyberClient
22/08/13 20:27:10
V
DevMode Copies: 1
22/08/13 20:27:10
A
-> CreateDCWCallback
22/08/13 20:27:10
A
-> DocumentPropertiesWCallBack

22/08/13 20:27:10
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:10
O
Impresora Final: CyberClient
22/08/13 20:27:10
V
DevMode Impresora: CyberClient
22/08/13 20:27:10
V
DevMode Copies: 1
22/08/13 20:27:10
F
lpszDevice: CyberClient
22/08/13 20:27:10
V
DevMode Impresora: CyberClient
22/08/13 20:27:10
V
DevMode Copies: 1
22/08/13 20:27:10
A
-> StartDocWCallback
22/08/13 20:27:10
N
DATOS EN PN ======================
22/08/13 20:27:10
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:27:10
N
API: StartDocW
22/08/13 20:27:10
N
Copies: 1
22/08/13 20:27:10
N
Doc: Microsoft Word - Documento1
22/08/13 20:27:10
N
Printer: CyberClient
22/08/13 20:27:10
N
Pages: 0
22/08/13 20:27:10
N
Params: 1910206622
22/08/13 20:27:10
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1596001867; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:27:10
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:27:10
I
** Impresion NO excluida
22/08/13 20:27:11
I
Answer: 255
22/08/13 20:27:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:11
O
Impresora Final: CyberClient
22/08/13 20:27:11
V
DevMode Impresora: CyberClient
22/08/13 20:27:11
V
DevMode Copies: 1
22/08/13 20:27:11
A
-> CreateDCWCallback
22/08/13 20:27:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:11
O
Impresora Final: CyberClient
22/08/13 20:27:11
V
DevMode Impresora: CyberClient
22/08/13 20:27:11
V
DevMode Copies: 1
22/08/13 20:27:11
F
lpszDevice: CyberClient
22/08/13 20:27:11
V
DevMode Impresora: CyberClient
22/08/13 20:27:11
V
DevMode Copies: 1
22/08/13 20:27:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:11
O
Impresora Final: CyberClient
22/08/13 20:27:11
V
DevMode Impresora: CyberClient
22/08/13 20:27:11
V
DevMode Copies: 1
22/08/13 20:27:11
A
-> ResetDCWCallback
22/08/13 20:27:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:11
A
-> DocumentPropertiesWCallBack
22/08/13 20:27:11
O
Impresora Final: CyberClient
22/08/13 20:27:11
V
DevMode Impresora: CyberClient
22/08/13 20:27:11
V
DevMode Copies: 1
22/08/13 20:27:11
V
DevMode Impresora: CyberClient
22/08/13 20:27:11
V
DevMode Copies: 1
22/08/13 20:27:11
A
-> EndPageCallback
22/08/13 20:27:11
A
-> EndPageCallback
22/08/13 20:27:11
A
-> EndDocCallback
22/08/13 20:27:11
N
DATOS EN PN ======================
22/08/13 20:27:11
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:27:11
N
API: EndDoc
22/08/13 20:27:11
N
Copies: 1
22/08/13 20:27:11
N
Doc: Microsoft Word - Documento1
22/08/13 20:27:11
N
Printer: CyberClient
22/08/13 20:27:11
N
Pages: 2
22/08/13 20:27:11
N
Params: 1910206622

22/08/13 20:27:11
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1596001867; doc: "Microsoft Word - Documento1"|||Cyber
Client|||5|||2|||1
22/08/13 20:27:11
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:27:11
I
** Impresion NO excluida
22/08/13 20:27:11
I
Answer: 255
22/08/13 20:27:31
A
-> NtTerminateProcessCallback
22/08/13 20:27:31
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
O
Impresora Final: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
A
-> CreateDCWCallback
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
O
Impresora Final: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
F
lpszDevice: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
A
-> StartDocWCallback
22/08/13 20:28:00
N
DATOS EN PN ======================
22/08/13 20:28:00
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:28:00
N
API: StartDocW
22/08/13 20:28:00
N
Copies: 1
22/08/13 20:28:00
N
Doc: Microsoft Word - Documento1
22/08/13 20:28:00
N
Printer: CyberClient
22/08/13 20:28:00
N
Pages: 0
22/08/13 20:28:00
N
Params: 1910206622
22/08/13 20:28:00
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1176571524; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
22/08/13 20:28:00
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:28:00
I
** Impresion NO excluida
22/08/13 20:28:00
I
Answer: 255
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
O
Impresora Final: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
A
-> CreateDCWCallback
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
O
Impresora Final: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
F
lpszDevice: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
O
Impresora Final: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
A
-> ResetDCWCallback
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:00
O
Impresora Final: CyberClient
22/08/13 20:28:00
V
DevMode Impresora: CyberClient

22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
V
DevMode Impresora: CyberClient
22/08/13 20:28:00
V
DevMode Copies: 1
22/08/13 20:28:00
A
-> EndPageCallback
22/08/13 20:28:00
A
-> EndPageCallback
22/08/13 20:28:00
A
-> EndDocCallback
22/08/13 20:28:00
N
DATOS EN PN ======================
22/08/13 20:28:00
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:28:00
N
API: EndDoc
22/08/13 20:28:00
N
Copies: 1
22/08/13 20:28:00
N
Doc: Microsoft Word - Documento1
22/08/13 20:28:00
N
Printer: CyberClient
22/08/13 20:28:00
N
Pages: 2
22/08/13 20:28:00
N
Params: 1910206622
22/08/13 20:28:00
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1176571524; doc: "Microsoft Word - Documento1"|||Cyber
Client|||6|||2|||1
22/08/13 20:28:00
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:28:00
I
** Impresion NO excluida
22/08/13 20:28:00
I
Answer: 255
22/08/13 20:28:17
A
-> NtTerminateProcessCallback
22/08/13 20:28:18
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:28:18
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:28:22
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:28:23
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:28:23
A
-> NtTerminateProcessCallback
22/08/13 20:28:23
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:28:25
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:28:25
A
-> CreateDCWCallback
22/08/13 20:28:27
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:28:27
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:28:27
A
-> NtTerminateProcessCallback
22/08/13 20:28:27
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:28:28
A
-> CreateDCWCallback
22/08/13 20:28:28
F
lpszDevice: \\.\DISPLAY1
22/08/13 20:28:28
A
-> CreateDCWCallback
22/08/13 20:28:28
F
lpszDevice: \\.\DISPLAY1
22/08/13 20:28:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:30
O
Impresora Final: CyberClient
22/08/13 20:28:30
V
DevMode Impresora: CyberClient
22/08/13 20:28:30
V
DevMode Copies: 1
22/08/13 20:28:30
A
-> CreateDCWCallback
22/08/13 20:28:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:30
A
-> DocumentPropertiesWCallBack
22/08/13 20:28:30
O
Impresora Final: CyberClient
22/08/13 20:28:30
V
DevMode Impresora: CyberClient
22/08/13 20:28:30
V
DevMode Copies: 1
22/08/13 20:28:30
F
lpszDevice: CyberClient
22/08/13 20:28:30
V
DevMode Impresora: CyberClient

22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13
22/08/13

20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:30
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:36
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38
20:28:38

V
A
A
A
O
V
V
F
V
V
A
A
A
O
V
V
F
V
V
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A

DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback

22/08/13 20:28:38
A
22/08/13 20:28:38
A
22/08/13 20:28:38
A
22/08/13 20:28:38
A
22/08/13 20:28:38
A
22/08/13 20:28:39
A
22/08/13 20:28:39
F
22/08/13 20:28:39
A
22/08/13 20:28:39
F
22/08/13 20:28:39
A
22/08/13 20:28:39
F
22/08/13 20:28:39
A
22/08/13 20:28:39
F
22/08/13 20:28:48
D
call: DLL_PROCESS_ATTACH
22/08/13 20:29:12
A
22/08/13 20:29:12
D
call: DLL_PROCESS_DETACH
22/08/13 20:29:15
D
call: DLL_PROCESS_ATTACH
22/08/13 20:29:18
D
call: DLL_PROCESS_ATTACH
22/08/13 20:29:19
A
22/08/13 20:29:23
A
22/08/13 20:29:25
A
22/08/13 20:29:25
A
22/08/13 20:29:25
O
22/08/13 20:29:25
V
22/08/13 20:29:25
V
22/08/13 20:29:25
A
22/08/13 20:29:25
O
22/08/13 20:29:25
V
22/08/13 20:29:25
V
22/08/13 20:29:25
A
22/08/13 20:29:25
A
22/08/13 20:29:25
A
22/08/13 20:29:25
O
22/08/13 20:29:25
V
22/08/13 20:29:25
V
22/08/13 20:29:25
F
22/08/13 20:29:25
V
22/08/13 20:29:25
V
22/08/13 20:29:25
A
22/08/13 20:29:25
A
22/08/13 20:29:25
A
22/08/13 20:29:25
O
22/08/13 20:29:25
V
22/08/13 20:29:25
V
22/08/13 20:29:25
F
22/08/13 20:29:25
V
22/08/13 20:29:25
V
22/08/13 20:29:26
A
22/08/13 20:29:26
O
22/08/13 20:29:26
V
22/08/13 20:29:26
V
22/08/13 20:29:26
A
22/08/13 20:29:27
A
22/08/13 20:29:27
A
22/08/13 20:29:27
O
22/08/13 20:29:27
V

->
->
->
->
->
->

CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1909981184 - Reason for
->
->
->
->

->

->
->
->

->
->
->

->

->
->
->

CreateDCWCallback
NtTerminateProcessCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
CreateDCWCallback
DocumentPropertiesWCallBack
DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient

22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
F
lpszDevice: CyberClient
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
A
-> StartDocWCallback
22/08/13 20:29:27
N
DATOS EN PN ======================
22/08/13 20:29:27
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:29:27
N
API: StartDocW
22/08/13 20:29:27
N
Copies: 1
22/08/13 20:29:27
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:29:27
N
Printer: CyberClient
22/08/13 20:29:27
N
Pages: 0
22/08/13 20:29:27
N
Params: 1910206622
22/08/13 20:29:27
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 186716434; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:29:27
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:29:27
I
** Impresion NO excluida
22/08/13 20:29:27
I
Answer: 255
22/08/13 20:29:27
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:27
O
Impresora Final: CyberClient
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
A
-> CreateDCWCallback
22/08/13 20:29:27
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:27
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:27
O
Impresora Final: CyberClient
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
F
lpszDevice: CyberClient
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:27
O
Impresora Final: CyberClient
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
A
-> ResetDCWCallback
22/08/13 20:29:27
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:27
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:27
O
Impresora Final: CyberClient
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
V
DevMode Impresora: CyberClient
22/08/13 20:29:27
V
DevMode Copies: 1
22/08/13 20:29:27
A
-> EndPageCallback
22/08/13 20:29:27
A
-> EndDocCallback
22/08/13 20:29:27
N
DATOS EN PN ======================
22/08/13 20:29:27
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:29:27
N
API: EndDoc
22/08/13 20:29:27
N
Copies: 1
22/08/13 20:29:27
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:29:27
N
Printer: CyberClient
22/08/13 20:29:27
N
Pages: 1
22/08/13 20:29:27
N
Params: 1910206622
22/08/13 20:29:27
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 186716434; doc: "Microsoft Word - Informtica es una cie

ncia que estudia mtodos"|||CyberClient|||7|||1|||1


22/08/13 20:29:27
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:29:27
I
** Impresion NO excluida
22/08/13 20:29:27
I
Answer: 255
22/08/13 20:29:28
A
-> CreateDCWCallback
22/08/13 20:29:28
F
lpszDevice: \\.\DISPLAY1
22/08/13 20:29:28
A
-> CreateDCWCallback
22/08/13 20:29:28
F
lpszDevice: \\.\DISPLAY1
22/08/13 20:29:38
A
-> CreateDCWCallback
22/08/13 20:29:38
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:38
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:38
O
Impresora Final: CyberClient
22/08/13 20:29:38
V
DevMode Impresora: CyberClient
22/08/13 20:29:38
V
DevMode Copies: 1
22/08/13 20:29:38
F
lpszDevice: CyberClient
22/08/13 20:29:38
V
DevMode Impresora: CyberClient
22/08/13 20:29:38
V
DevMode Copies: 1
22/08/13 20:29:38
A
-> CreateDCWCallback
22/08/13 20:29:38
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:38
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:38
O
Impresora Final: CyberClient
22/08/13 20:29:38
V
DevMode Impresora: CyberClient
22/08/13 20:29:38
V
DevMode Copies: 1
22/08/13 20:29:38
F
lpszDevice: CyberClient
22/08/13 20:29:38
V
DevMode Impresora: CyberClient
22/08/13 20:29:38
V
DevMode Copies: 1
22/08/13 20:29:38
A
-> CreateDCWCallback
22/08/13 20:29:38
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:38
A
-> DocumentPropertiesWCallBack
22/08/13 20:29:38
O
Impresora Final: CyberClient
22/08/13 20:29:38
V
DevMode Impresora: CyberClient
22/08/13 20:29:38
V
DevMode Copies: 1
22/08/13 20:29:38
F
lpszDevice: CyberClient
22/08/13 20:29:38
V
DevMode Impresora: CyberClient
22/08/13 20:29:38
V
DevMode Copies: 1
22/08/13 20:29:41
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_ATTACH
22/08/13 20:29:52
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_ATTACH
22/08/13 20:30:04
A
-> NtTerminateProcessCallback
22/08/13 20:30:04
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_DETACH
22/08/13 20:30:26
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_ATTACH
22/08/13 20:30:27
A
-> NtTerminateProcessCallback
22/08/13 20:30:27
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_DETACH
22/08/13 20:30:27
A
-> NtTerminateProcessCallback
22/08/13 20:30:27
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_DETACH
22/08/13 20:30:28
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_ATTACH
22/08/13 20:30:28
A
-> NtTerminateProcessCallback
22/08/13 20:30:28
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_DETACH
22/08/13 20:30:29
A
-> NtTerminateProcessCallback
22/08/13 20:30:29
D
Enter DllMain -> Handle: 1909981184
call: DLL_PROCESS_DETACH
22/08/13 20:30:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:33
O
Impresora Final: CyberClient

- Reason for
- Reason for
- Reason for
- Reason for
- Reason for
- Reason for
- Reason for
- Reason for
- Reason for

22/08/13 20:30:33
V
DevMode Impresora: CyberClient
22/08/13 20:30:33
V
DevMode Copies: 1
22/08/13 20:30:33
A
-> CreateDCWCallback
22/08/13 20:30:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:33
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
O
Impresora Final: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
F
lpszDevice: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
A
-> StartDocWCallback
22/08/13 20:30:34
N
DATOS EN PN ======================
22/08/13 20:30:34
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:30:34
N
API: StartDocW
22/08/13 20:30:34
N
Copies: 1
22/08/13 20:30:34
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:30:34
N
Printer: CyberClient
22/08/13 20:30:34
N
Pages: 0
22/08/13 20:30:34
N
Params: 1910206622
22/08/13 20:30:34
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 656478515; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:30:34
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:30:34
I
** Impresion NO excluida
22/08/13 20:30:34
I
Answer: 255
22/08/13 20:30:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
O
Impresora Final: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
A
-> CreateDCWCallback
22/08/13 20:30:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
O
Impresora Final: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
F
lpszDevice: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
O
Impresora Final: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
A
-> ResetDCWCallback
22/08/13 20:30:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
A
-> DocumentPropertiesWCallBack
22/08/13 20:30:34
O
Impresora Final: CyberClient
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
V
DevMode Impresora: CyberClient
22/08/13 20:30:34
V
DevMode Copies: 1
22/08/13 20:30:34
A
-> EndPageCallback
22/08/13 20:30:34
A
-> EndDocCallback
22/08/13 20:30:34
N
DATOS EN PN ======================
22/08/13 20:30:34
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:30:34
N
API: EndDoc
22/08/13 20:30:34
N
Copies: 1

22/08/13 20:30:34
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:30:34
N
Printer: CyberClient
22/08/13 20:30:34
N
Pages: 1
22/08/13 20:30:34
N
Params: 1910206622
22/08/13 20:30:34
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 656478515; doc: "Microsoft Word - Informtica es una cie
ncia que estudia mtodos"|||CyberClient|||8|||1|||1
22/08/13 20:30:34
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:30:34
I
** Impresion NO excluida
22/08/13 20:30:34
I
Answer: 255
22/08/13 20:31:46
A
-> CreateDCWCallback
22/08/13 20:31:59
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:32:03
A
-> CreateDCWCallback
22/08/13 20:32:04
A
-> NtTerminateProcessCallback
22/08/13 20:32:04
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:32:09
A
-> NtTerminateProcessCallback
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
O
Impresora Final: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
A
-> CreateDCWCallback
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
O
Impresora Final: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
F
lpszDevice: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
A
-> StartDocWCallback
22/08/13 20:32:46
N
DATOS EN PN ======================
22/08/13 20:32:46
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:32:46
N
API: StartDocW
22/08/13 20:32:46
N
Copies: 1
22/08/13 20:32:46
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:32:46
N
Printer: CyberClient
22/08/13 20:32:46
N
Pages: 0
22/08/13 20:32:46
N
Params: 1910206622
22/08/13 20:32:46
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1109463375; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:32:46
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:32:46
I
** Impresion NO excluida
22/08/13 20:32:46
I
Answer: 255
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
O
Impresora Final: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
A
-> CreateDCWCallback
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
O
Impresora Final: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
F
lpszDevice: CyberClient

22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
O
Impresora Final: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
A
-> ResetDCWCallback
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
A
-> DocumentPropertiesWCallBack
22/08/13 20:32:46
O
Impresora Final: CyberClient
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:46
V
DevMode Impresora: CyberClient
22/08/13 20:32:46
V
DevMode Copies: 1
22/08/13 20:32:47
A
-> EndPageCallback
22/08/13 20:32:47
A
-> EndDocCallback
22/08/13 20:32:47
N
DATOS EN PN ======================
22/08/13 20:32:47
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:32:47
N
API: EndDoc
22/08/13 20:32:47
N
Copies: 1
22/08/13 20:32:47
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:32:47
N
Printer: CyberClient
22/08/13 20:32:47
N
Pages: 1
22/08/13 20:32:47
N
Params: 1910206622
22/08/13 20:32:47
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1109463375; doc: "Microsoft Word - Informtica es una ci
encia que estudia mtodos"|||CyberClient|||9|||1|||1
22/08/13 20:32:47
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:32:47
I
** Impresion NO excluida
22/08/13 20:32:47
I
Answer: 255
22/08/13 20:33:25
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:33:36
A
-> NtTerminateProcessCallback
22/08/13 20:33:36
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
O
Impresora Final: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
A
-> CreateDCWCallback
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
O
Impresora Final: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
F
lpszDevice: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
A
-> StartDocWCallback
22/08/13 20:34:48
N
DATOS EN PN ======================
22/08/13 20:34:48
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:34:48
N
API: StartDocW
22/08/13 20:34:48
N
Copies: 1
22/08/13 20:34:48
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:34:48
N
Printer: CyberClient
22/08/13 20:34:48
N
Pages: 0

22/08/13 20:34:48
N
Params: 1910206622
22/08/13 20:34:48
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 2334199436; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:34:48
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:34:48
I
** Impresion NO excluida
22/08/13 20:34:48
I
Answer: 255
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
O
Impresora Final: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
A
-> CreateDCWCallback
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
O
Impresora Final: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
F
lpszDevice: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
O
Impresora Final: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
A
-> ResetDCWCallback
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
A
-> DocumentPropertiesWCallBack
22/08/13 20:34:48
O
Impresora Final: CyberClient
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
V
DevMode Impresora: CyberClient
22/08/13 20:34:48
V
DevMode Copies: 1
22/08/13 20:34:48
A
-> EndPageCallback
22/08/13 20:34:48
A
-> EndDocCallback
22/08/13 20:34:48
N
DATOS EN PN ======================
22/08/13 20:34:48
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:34:48
N
API: EndDoc
22/08/13 20:34:48
N
Copies: 1
22/08/13 20:34:48
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:34:48
N
Printer: CyberClient
22/08/13 20:34:48
N
Pages: 1
22/08/13 20:34:48
N
Params: 1910206622
22/08/13 20:34:48
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 2334199436; doc: "Microsoft Word - Informtica es una ci
encia que estudia mtodos"|||CyberClient|||10|||1|||1
22/08/13 20:34:48
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:34:48
I
** Impresion NO excluida
22/08/13 20:34:48
I
Answer: 255
22/08/13 20:35:57
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:57
O
Impresora Final: CyberClient
22/08/13 20:35:57
V
DevMode Impresora: CyberClient
22/08/13 20:35:57
V
DevMode Copies: 1
22/08/13 20:35:57
A
-> CreateDCWCallback
22/08/13 20:35:57
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:57
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:57
O
Impresora Final: CyberClient
22/08/13 20:35:57
V
DevMode Impresora: CyberClient
22/08/13 20:35:57
V
DevMode Copies: 1

22/08/13 20:35:57
F
lpszDevice: CyberClient
22/08/13 20:35:57
V
DevMode Impresora: CyberClient
22/08/13 20:35:57
V
DevMode Copies: 1
22/08/13 20:35:58
A
-> StartDocWCallback
22/08/13 20:35:58
N
DATOS EN PN ======================
22/08/13 20:35:58
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:35:58
N
API: StartDocW
22/08/13 20:35:58
N
Copies: 1
22/08/13 20:35:58
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:35:58
N
Printer: CyberClient
22/08/13 20:35:58
N
Pages: 0
22/08/13 20:35:58
N
Params: 1910206622
22/08/13 20:35:58
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1579224388; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:35:58
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:35:58
I
** Impresion NO excluida
22/08/13 20:35:58
I
Answer: 255
22/08/13 20:35:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:58
O
Impresora Final: CyberClient
22/08/13 20:35:58
V
DevMode Impresora: CyberClient
22/08/13 20:35:58
V
DevMode Copies: 1
22/08/13 20:35:58
A
-> CreateDCWCallback
22/08/13 20:35:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:58
O
Impresora Final: CyberClient
22/08/13 20:35:58
V
DevMode Impresora: CyberClient
22/08/13 20:35:58
V
DevMode Copies: 1
22/08/13 20:35:58
F
lpszDevice: CyberClient
22/08/13 20:35:58
V
DevMode Impresora: CyberClient
22/08/13 20:35:58
V
DevMode Copies: 1
22/08/13 20:35:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:58
O
Impresora Final: CyberClient
22/08/13 20:35:58
V
DevMode Impresora: CyberClient
22/08/13 20:35:58
V
DevMode Copies: 1
22/08/13 20:35:58
A
-> ResetDCWCallback
22/08/13 20:35:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:58
A
-> DocumentPropertiesWCallBack
22/08/13 20:35:58
O
Impresora Final: CyberClient
22/08/13 20:35:58
V
DevMode Impresora: CyberClient
22/08/13 20:35:58
V
DevMode Copies: 1
22/08/13 20:35:58
V
DevMode Impresora: CyberClient
22/08/13 20:35:58
V
DevMode Copies: 1
22/08/13 20:35:58
A
-> EndPageCallback
22/08/13 20:35:58
A
-> EndDocCallback
22/08/13 20:35:58
N
DATOS EN PN ======================
22/08/13 20:35:58
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:35:58
N
API: EndDoc
22/08/13 20:35:58
N
Copies: 1
22/08/13 20:35:58
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:35:58
N
Printer: CyberClient
22/08/13 20:35:58
N
Pages: 1
22/08/13 20:35:58
N
Params: 1910206622
22/08/13 20:35:58
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1579224388; doc: "Microsoft Word - Informtica es una ci
encia que estudia mtodos"|||CyberClient|||11|||1|||1

22/08/13 20:35:58
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:35:58
I
** Impresion NO excluida
22/08/13 20:35:58
I
Answer: 255
22/08/13 20:36:18
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:36:18
A
-> NtTerminateProcessCallback
22/08/13 20:36:18
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
O
Impresora Final: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
A
-> CreateDCWCallback
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
O
Impresora Final: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
F
lpszDevice: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
A
-> StartDocWCallback
22/08/13 20:38:00
N
DATOS EN PN ======================
22/08/13 20:38:00
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:38:00
N
API: StartDocW
22/08/13 20:38:00
N
Copies: 1
22/08/13 20:38:00
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:38:00
N
Printer: CyberClient
22/08/13 20:38:00
N
Pages: 0
22/08/13 20:38:00
N
Params: 1910206622
22/08/13 20:38:00
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 773919127; doc: "Microsoft Word - Informtica es una
ciencia que estudia mtodos"|||CyberClient|||||||||
22/08/13 20:38:00
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:38:00
I
** Impresion NO excluida
22/08/13 20:38:00
I
Answer: 255
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
O
Impresora Final: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
A
-> CreateDCWCallback
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
O
Impresora Final: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
F
lpszDevice: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
O
Impresora Final: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
A
-> ResetDCWCallback
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
A
-> DocumentPropertiesWCallBack
22/08/13 20:38:00
O
Impresora Final: CyberClient
22/08/13 20:38:00
V
DevMode Impresora: CyberClient

22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
V
DevMode Impresora: CyberClient
22/08/13 20:38:00
V
DevMode Copies: 1
22/08/13 20:38:00
A
-> EndPageCallback
22/08/13 20:38:00
A
-> EndDocCallback
22/08/13 20:38:00
N
DATOS EN PN ======================
22/08/13 20:38:00
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
22/08/13 20:38:00
N
API: EndDoc
22/08/13 20:38:00
N
Copies: 1
22/08/13 20:38:00
N
Doc: Microsoft Word - Informtica es una ciencia q
ue estudia mtodos
22/08/13 20:38:00
N
Printer: CyberClient
22/08/13 20:38:00
N
Pages: 1
22/08/13 20:38:00
N
Params: 1910206622
22/08/13 20:38:00
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 773919127; doc: "Microsoft Word - Informtica es una cie
ncia que estudia mtodos"|||CyberClient|||12|||1|||1
22/08/13 20:38:00
I
Sending IPC to: VentanaCyberClient1
22/08/13 20:38:00
I
** Impresion NO excluida
22/08/13 20:38:00
I
Answer: 255
22/08/13 20:38:17
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:38:17
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:38:22
A
-> NtTerminateProcessCallback
22/08/13 20:38:51
A
-> NtTerminateProcessCallback
22/08/13 20:38:51
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:38:53
A
-> NtTerminateProcessCallback
22/08/13 20:38:53
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:38:53
A
-> NtTerminateProcessCallback
22/08/13 20:38:53
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:40:05
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:40:08
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:40:10
A
-> NtTerminateProcessCallback
22/08/13 20:40:19
A
-> NtTerminateProcessCallback
22/08/13 20:40:19
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:40:33
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:40:33
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:40:33
A
-> CreateDCWCallback
22/08/13 20:40:33
A
-> CreateDCWCallback
22/08/13 20:40:33
A
-> CreateDCWCallback
22/08/13 20:40:33
A
-> CreateDCWCallback
22/08/13 20:40:34
A
-> CreateDCWCallback
22/08/13 20:40:34
A
-> CreateDCWCallback
22/08/13 20:40:34
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_ATTACH
22/08/13 20:40:34
A
-> NtTerminateProcessCallback
22/08/13 20:40:34
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH
22/08/13 20:40:34
D
Enter DllMain -> Handle: 1909981184 - Reason for
call: DLL_PROCESS_DETACH

22/08/13 20:40:34
D
call: DLL_PROCESS_ATTACH
22/08/13 20:40:37
A
22/08/13 20:40:37
F
22/08/13 20:40:39
A
22/08/13 20:40:44
D
call: DLL_PROCESS_ATTACH
22/08/13 20:40:45
A
22/08/13 20:40:45
F
22/08/13 20:40:57
A
22/08/13 20:41:01
D
call: DLL_PROCESS_ATTACH
22/08/13 20:41:08
A
22/08/13 20:41:08
D
call: DLL_PROCESS_DETACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:44
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:48
A
23/08/13 21:18:48
D
call: DLL_PROCESS_DETACH
23/08/13 21:18:52
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:54
D
call: DLL_PROCESS_ATTACH
23/08/13 21:18:59
A
23/08/13 21:19:23
A
23/08/13 21:19:23
D
call: DLL_PROCESS_DETACH
23/08/13 21:19:59
D
call: DLL_PROCESS_ATTACH
23/08/13 21:20:00
A
23/08/13 21:20:00
D
call: DLL_PROCESS_DETACH
23/08/13 21:20:10
D
call: DLL_PROCESS_ATTACH
23/08/13 21:20:17
A
23/08/13 21:20:17
D
call: DLL_PROCESS_DETACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1909981184 - Reason for


-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1909981184 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1727725568 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1727725568 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for

05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:48
A
05/09/13 14:52:48
D
call: DLL_PROCESS_DETACH
05/09/13 14:52:48
A
05/09/13 14:52:48
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:49
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:49
D
call: DLL_PROCESS_ATTACH
05/09/13 14:52:56
A
05/09/13 14:52:56
D
call: DLL_PROCESS_DETACH
05/09/13 14:53:06
A
05/09/13 14:53:06
D
call: DLL_PROCESS_DETACH
05/09/13 14:53:44
A
05/09/13 14:53:44
D
call: DLL_PROCESS_DETACH
05/09/13 14:53:54
A
05/09/13 14:53:54
D
call: DLL_PROCESS_DETACH
05/09/13 14:55:36
D
call: DLL_PROCESS_ATTACH
05/09/13 14:56:18
A
05/09/13 14:56:18
D
call: DLL_PROCESS_DETACH
05/09/13 14:57:41
D
call: DLL_PROCESS_ATTACH
05/09/13 14:57:41
D
call: DLL_PROCESS_ATTACH
05/09/13 14:57:41
A
05/09/13 14:57:41
D
call: DLL_PROCESS_DETACH
05/09/13 14:58:05
A
05/09/13 14:58:05
D
call: DLL_PROCESS_DETACH
05/09/13 14:58:51
D
call: DLL_PROCESS_ATTACH
05/09/13 14:59:57
A
05/09/13 14:59:57
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1846935552 - Reason for


Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for

05/09/13 15:02:36
D
call: DLL_PROCESS_ATTACH
05/09/13 15:02:37
D
call: DLL_PROCESS_ATTACH
05/09/13 15:02:42
A
05/09/13 15:05:00
D
call: DLL_PROCESS_ATTACH
05/09/13 15:05:32
D
call: DLL_PROCESS_ATTACH
05/09/13 15:05:32
D
call: DLL_PROCESS_ATTACH
05/09/13 15:05:33
A
05/09/13 15:05:33
D
call: DLL_PROCESS_DETACH
05/09/13 15:05:37
A
05/09/13 15:05:37
D
call: DLL_PROCESS_ATTACH
05/09/13 15:05:37
D
call: DLL_PROCESS_ATTACH
05/09/13 15:05:37
A
05/09/13 15:05:37
D
call: DLL_PROCESS_DETACH
05/09/13 15:05:49
A
05/09/13 15:05:49
D
call: DLL_PROCESS_DETACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:41
A
05/09/13 15:06:41
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:42
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:42
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:42
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:42
A
05/09/13 15:06:42
D
call: DLL_PROCESS_DETACH
05/09/13 15:06:42
D
call: DLL_PROCESS_ATTACH
05/09/13 15:06:43
A
05/09/13 15:06:43
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1846935552 - Reason for


Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1846935552 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for

05/09/13 15:06:57
A
05/09/13 15:06:57
D
call: DLL_PROCESS_DETACH
05/09/13 15:07:34
A
05/09/13 15:07:34
D
call: DLL_PROCESS_DETACH
05/09/13 15:07:48
A
05/09/13 15:07:48
D
call: DLL_PROCESS_DETACH
05/09/13 15:08:15
D
call: DLL_PROCESS_ATTACH
05/09/13 15:08:22
A
05/09/13 15:08:22
D
call: DLL_PROCESS_DETACH
05/09/13 15:08:23
D
call: DLL_PROCESS_ATTACH
05/09/13 15:08:33
A
05/09/13 15:08:33
D
call: DLL_PROCESS_DETACH
05/09/13 15:08:36
A
05/09/13 15:10:26
D
call: DLL_PROCESS_ATTACH
05/09/13 15:10:30
D
call: DLL_PROCESS_ATTACH
05/09/13 15:10:30
A
05/09/13 15:10:30
F
05/09/13 15:10:37
A
05/09/13 15:10:42
A
05/09/13 15:10:45
D
call: DLL_PROCESS_ATTACH
05/09/13 15:10:50
A
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
Enter DllMain -> Handle: 1823866880 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1823866880 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for

call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:34
A
07/09/13 08:19:34
D
call: DLL_PROCESS_DETACH
07/09/13 08:19:35
D
call: DLL_PROCESS_ATTACH
07/09/13 08:19:38
A
07/09/13 08:19:38
D
call: DLL_PROCESS_DETACH
07/09/13 08:19:42
A
07/09/13 08:19:42
D
call: DLL_PROCESS_DETACH
07/09/13 08:20:20
A
07/09/13 08:20:20
D
call: DLL_PROCESS_DETACH
07/09/13 08:20:33
A
07/09/13 08:20:33
D
call: DLL_PROCESS_DETACH
07/09/13 08:21:31
D
call: DLL_PROCESS_ATTACH
07/09/13 08:21:32
D
call: DLL_PROCESS_ATTACH
07/09/13 08:21:37
A
07/09/13 08:21:44
D
call: DLL_PROCESS_ATTACH
07/09/13 08:21:44
A
07/09/13 08:21:44
D
call: DLL_PROCESS_DETACH
07/09/13 08:26:12
D
call: DLL_PROCESS_ATTACH
07/09/13 08:26:54
A
07/09/13 08:26:54
D
call: DLL_PROCESS_DETACH
07/09/13 08:27:01
D
call: DLL_PROCESS_ATTACH
07/09/13 08:27:03
A
07/09/13 08:27:03
D
call: DLL_PROCESS_DETACH
07/09/13 08:27:03
D
call: DLL_PROCESS_ATTACH
07/09/13 08:27:03
D
call: DLL_PROCESS_ATTACH
07/09/13 08:27:04
A
07/09/13 08:27:04
D
call: DLL_PROCESS_DETACH
07/09/13 08:27:08
A
07/09/13 08:29:13
D
call: DLL_PROCESS_ATTACH
07/09/13 08:29:13
A
07/09/13 08:29:13
D
call: DLL_PROCESS_DETACH
07/09/13 08:32:02
D
call: DLL_PROCESS_ATTACH
07/09/13 08:32:04
A
07/09/13 08:32:04
D
call: DLL_PROCESS_DETACH
07/09/13 08:32:09
A
07/09/13 08:32:09
D

Enter DllMain -> Handle: 1791295488 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1791295488 - Reason for

call: DLL_PROCESS_DETACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:08
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:09
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:09
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:09
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:09
A
09/09/13 08:16:09
D
call: DLL_PROCESS_DETACH
09/09/13 08:16:09
A
09/09/13 08:16:09
D
call: DLL_PROCESS_DETACH
09/09/13 08:16:10
A
09/09/13 08:16:10
D
call: DLL_PROCESS_DETACH
09/09/13 08:16:13
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:13
D
call: DLL_PROCESS_ATTACH
09/09/13 08:16:59
A
09/09/13 08:16:59
D
call: DLL_PROCESS_DETACH
09/09/13 08:17:18
A
09/09/13 08:17:18
D
call: DLL_PROCESS_DETACH
09/09/13 08:18:32
D
call: DLL_PROCESS_ATTACH
09/09/13 08:19:08
A
09/09/13 08:19:08
D
call: DLL_PROCESS_DETACH
09/09/13 08:22:58
D
call: DLL_PROCESS_ATTACH
09/09/13 08:22:58
A
09/09/13 08:22:58
D
call: DLL_PROCESS_DETACH
09/09/13 08:25:53
D
call: DLL_PROCESS_ATTACH
09/09/13 08:25:54
D
call: DLL_PROCESS_ATTACH

Enter DllMain -> Handle: 1819475968 - Reason for


Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for

09/09/13 08:25:59
A
09/09/13 08:28:35
D
call: DLL_PROCESS_ATTACH
09/09/13 08:28:35
A
09/09/13 08:28:35
D
call: DLL_PROCESS_DETACH
09/09/13 08:30:54
D
call: DLL_PROCESS_ATTACH
09/09/13 08:30:59
A
09/09/13 08:34:26
A
09/09/13 08:34:26
D
call: DLL_PROCESS_DETACH
09/09/13 08:34:27
D
call: DLL_PROCESS_ATTACH
09/09/13 08:34:27
A
09/09/13 08:34:27
A
09/09/13 08:34:27
A
09/09/13 08:34:27
A
09/09/13 08:34:27
D
call: DLL_PROCESS_ATTACH
09/09/13 08:34:27
D
call: DLL_PROCESS_ATTACH
09/09/13 08:34:27
A
09/09/13 08:34:27
D
call: DLL_PROCESS_DETACH
09/09/13 08:34:27
A
09/09/13 08:34:27
D
call: DLL_PROCESS_DETACH
09/09/13 08:34:27
D
call: DLL_PROCESS_ATTACH
09/09/13 08:35:54
A
09/09/13 08:35:54
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:33
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:34
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:35
A
09/09/13 08:40:35
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:35
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:35
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:35
A
09/09/13 08:40:35
A
09/09/13 08:40:35
A
09/09/13 08:40:35
A
09/09/13 08:40:41
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:41
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:41
A
09/09/13 08:40:41
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:41
A
09/09/13 08:40:41
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:41
D
call: DLL_PROCESS_ATTACH

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for

09/09/13 08:40:42
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:42
A
09/09/13 08:40:42
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:42
A
09/09/13 08:40:42
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:47
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:47
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:47
A
09/09/13 08:40:47
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:47
A
09/09/13 08:40:47
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:48
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:50
D
call: DLL_PROCESS_ATTACH
09/09/13 08:40:50
A
09/09/13 08:40:50
D
call: DLL_PROCESS_DETACH
09/09/13 08:40:50
A
09/09/13 08:40:50
D
call: DLL_PROCESS_DETACH
09/09/13 08:41:03
D
call: DLL_PROCESS_ATTACH
09/09/13 08:41:03
A
09/09/13 08:41:03
D
call: DLL_PROCESS_DETACH
09/09/13 08:41:04
A
09/09/13 08:41:04
D
call: DLL_PROCESS_DETACH
09/09/13 08:41:04
A
09/09/13 08:41:04
D
call: DLL_PROCESS_DETACH
09/09/13 08:44:09
D
call: DLL_PROCESS_ATTACH
09/09/13 08:44:09
D
call: DLL_PROCESS_ATTACH
09/09/13 08:44:10
A
09/09/13 08:44:10
F
09/09/13 08:44:10
A
09/09/13 08:44:10
F
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A

Enter DllMain -> Handle: 1819475968 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback

09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:14
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:36
A
09/09/13 08:44:37
D
call: DLL_PROCESS_ATTACH
09/09/13 08:44:37
A
09/09/13 08:44:37
F
09/09/13 08:44:37
A
09/09/13 08:44:37
F
09/09/13 08:44:37
A
09/09/13 08:44:37
F
09/09/13 08:44:37
A
09/09/13 08:44:37
F
09/09/13 08:44:37
A
09/09/13 08:44:37
F
09/09/13 08:44:37
A
09/09/13 08:44:37
F
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A

-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback

09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:44:37
A
09/09/13 08:45:14
A
09/09/13 08:45:14
F
09/09/13 08:45:14
A
09/09/13 08:45:14
F
09/09/13 08:46:15
A
09/09/13 08:46:15
D
call: DLL_PROCESS_DETACH
09/09/13 08:53:51
A
09/09/13 08:53:51
D
call: DLL_PROCESS_DETACH
09/09/13 08:53:51
A
09/09/13 08:53:51
D
call: DLL_PROCESS_DETACH
09/09/13 08:53:54
D
call: DLL_PROCESS_ATTACH
09/09/13 08:53:55
D
call: DLL_PROCESS_ATTACH
09/09/13 08:53:55
A
09/09/13 08:53:55
F
09/09/13 08:53:55
A
09/09/13 08:53:55
F
09/09/13 08:53:55
A
09/09/13 08:53:55
A
09/09/13 08:53:55
A
09/09/13 08:53:55
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A

->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->

CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback

09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:56
A
09/09/13 08:53:58
A
09/09/13 08:53:58
F
09/09/13 08:53:58
A
09/09/13 08:53:58
F
09/09/13 08:53:58
A
09/09/13 08:53:58
F
09/09/13 08:53:58
A
09/09/13 08:53:58
F
09/09/13 08:54:23
D
call: DLL_PROCESS_ATTACH
09/09/13 08:55:35
A
09/09/13 08:55:35
D
call: DLL_PROCESS_DETACH
09/09/13 08:55:35
A
09/09/13 08:55:35
D
call: DLL_PROCESS_DETACH
09/09/13 08:55:37
D
call: DLL_PROCESS_ATTACH
09/09/13 08:55:37
D
call: DLL_PROCESS_ATTACH

->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->

CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for

09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13

08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:37
08:55:38
08:55:38
08:55:38
08:55:38
08:55:38
08:55:38
08:55:38
08:55:38
08:57:14
08:57:14

A
F
A
F
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
F
A
F
A
F
A
F
A
D

-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for

call: DLL_PROCESS_DETACH
09/09/13 08:57:14
A
09/09/13 08:57:14
D
call: DLL_PROCESS_DETACH
09/09/13 08:57:16
D
call: DLL_PROCESS_ATTACH
09/09/13 08:57:16
D
call: DLL_PROCESS_ATTACH
09/09/13 08:57:16
D
call: DLL_PROCESS_ATTACH
09/09/13 08:57:16
A
09/09/13 08:57:16
F
09/09/13 08:57:16
A
09/09/13 08:57:16
F
09/09/13 08:57:16
A
09/09/13 08:57:16
D
call: DLL_PROCESS_DETACH
09/09/13 08:57:16
D
call: DLL_PROCESS_ATTACH
09/09/13 08:57:16
A
09/09/13 08:57:16
F
09/09/13 08:57:16
A
09/09/13 08:57:16
F
09/09/13 08:57:16
A
09/09/13 08:57:16
D
call: DLL_PROCESS_DETACH
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A
09/09/13 08:57:16
A

-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->

CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback

09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13
09/09/13

08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:16
08:57:19
08:57:19
08:57:19

A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
A
F
A

->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->
->

CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback

09/09/13 08:57:19
F
09/09/13 08:57:19
A
09/09/13 08:57:19
F
09/09/13 08:57:19
A
09/09/13 08:57:19
F
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 08:59:19
A
09/09/13 09:05:00
D
call: DLL_PROCESS_ATTACH
09/09/13 09:05:00
D
call: DLL_PROCESS_ATTACH
09/09/13 09:05:01
A
09/09/13 09:05:01
D
call: DLL_PROCESS_DETACH
09/09/13 09:05:35
D
call: DLL_PROCESS_ATTACH

lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
-> CreateDCWCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for

09/09/13 09:07:20
D
call: DLL_PROCESS_ATTACH
09/09/13 09:07:20
A
09/09/13 09:07:20
D
call: DLL_PROCESS_DETACH
09/09/13 09:09:01
A
09/09/13 09:09:01
A
09/09/13 09:09:01
D
call: DLL_PROCESS_DETACH
09/09/13 09:09:01
D
call: DLL_PROCESS_DETACH
09/09/13 09:09:01
A
09/09/13 09:09:01
D
call: DLL_PROCESS_DETACH
09/09/13 09:10:01
A
09/09/13 09:10:01
D
call: DLL_PROCESS_DETACH
09/09/13 09:10:55
D
call: DLL_PROCESS_ATTACH
09/09/13 09:10:57
D
call: DLL_PROCESS_ATTACH
09/09/13 09:10:57
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:00
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:00
A
09/09/13 09:11:00
D
call: DLL_PROCESS_DETACH
09/09/13 09:11:01
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:01
A
09/09/13 09:11:01
D
call: DLL_PROCESS_DETACH
09/09/13 09:11:03
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:03
A
09/09/13 09:11:03
D
call: DLL_PROCESS_DETACH
09/09/13 09:11:13
A
09/09/13 09:11:13
R
09/09/13 09:11:15
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:15
A
09/09/13 09:11:15
D
call: DLL_PROCESS_DETACH
09/09/13 09:11:15
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:31
A
09/09/13 09:11:31
R
09/09/13 09:11:59
D
call: DLL_PROCESS_ATTACH
09/09/13 09:11:59
A
09/09/13 09:11:59
D
call: DLL_PROCESS_DETACH
09/09/13 09:12:28
D
call: DLL_PROCESS_ATTACH
09/09/13 09:12:28
A
09/09/13 09:12:33
D
call: DLL_PROCESS_ATTACH
09/09/13 09:12:35
A

Enter DllMain -> Handle: 1819475968 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> DocumentPropertiesWCallBack

09/09/13 09:12:35
A
09/09/13 09:12:35
O
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:35
A
09/09/13 09:12:35
A
09/09/13 09:12:35
A
09/09/13 09:12:35
O
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:35
F
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:35
A
09/09/13 09:12:35
A
09/09/13 09:12:35
A
09/09/13 09:12:35
O
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:35
F
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:35
A
09/09/13 09:12:35
A
09/09/13 09:12:35
A
09/09/13 09:12:35
O
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:35
F
09/09/13 09:12:35
V
09/09/13 09:12:35
V
09/09/13 09:12:41
D
call: DLL_PROCESS_ATTACH
09/09/13 09:12:42
A
09/09/13 09:12:42
R
09/09/13 09:12:49
D
call: DLL_PROCESS_ATTACH
09/09/13 09:13:18
A
09/09/13 09:13:18
R
09/09/13 09:13:23
D
call: DLL_PROCESS_ATTACH
09/09/13 09:21:03
D
call: DLL_PROCESS_ATTACH
09/09/13 09:21:03
A
09/09/13 09:21:03
D
call: DLL_PROCESS_DETACH
09/09/13 09:21:03
D
call: DLL_PROCESS_ATTACH
09/09/13 09:21:03
A
09/09/13 09:21:03
D
call: DLL_PROCESS_DETACH
09/09/13 09:42:02
A
09/09/13 09:42:02
O
09/09/13 09:42:02
V
09/09/13 09:42:02
V
09/09/13 09:42:02
A
09/09/13 09:42:02
A
09/09/13 09:42:02
A
09/09/13 09:42:02
O
09/09/13 09:42:02
V

-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient

09/09/13 09:42:02
V
DevMode Copies: 1
09/09/13 09:42:02
F
lpszDevice: CyberClient
09/09/13 09:42:02
V
DevMode Impresora: CyberClient
09/09/13 09:42:02
V
DevMode Copies: 1
09/09/13 09:45:14
A
-> CreateDCWCallback
09/09/13 09:45:14
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:14
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:14
O
Impresora Final: CyberClient
09/09/13 09:45:14
V
DevMode Impresora: CyberClient
09/09/13 09:45:14
V
DevMode Copies: 1
09/09/13 09:45:15
F
lpszDevice: CyberClient
09/09/13 09:45:15
V
DevMode Impresora: CyberClient
09/09/13 09:45:15
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
O
Impresora Final: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> CreateDCWCallback
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
O
Impresora Final: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
F
lpszDevice: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> StartDocWCallback
09/09/13 09:45:16
N
DATOS EN PN ======================
09/09/13 09:45:16
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
09/09/13 09:45:16
N
API: StartDocW
09/09/13 09:45:16
N
Copies: 1
09/09/13 09:45:16
N
Doc: Microsoft Word - Documento1
09/09/13 09:45:16
N
Printer: CyberClient
09/09/13 09:45:16
N
Pages: 0
09/09/13 09:45:16
N
Params: 1819701406
09/09/13 09:45:16
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||StartDocW|||dc: 1948325441; doc: "Microsoft Word - Documento1"|||Cy
berClient|||||||||
09/09/13 09:45:16
I
Sending IPC to: VentanaCyberClient1
09/09/13 09:45:16
I
** Impresion NO excluida
09/09/13 09:45:16
I
Answer: 255
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
O
Impresora Final: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> CreateDCWCallback
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
O
Impresora Final: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
F
lpszDevice: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
O
Impresora Final: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> ResetDCWCallback

09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
A
-> DocumentPropertiesWCallBack
09/09/13 09:45:16
O
Impresora Final: CyberClient
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
V
DevMode Impresora: CyberClient
09/09/13 09:45:16
V
DevMode Copies: 1
09/09/13 09:45:16
A
-> EndPageCallback
09/09/13 09:45:16
A
-> EndDocCallback
09/09/13 09:45:16
N
DATOS EN PN ======================
09/09/13 09:45:16
N
Process: C:\Program Files\Microsoft Office\Offic
e14\WINWORD.EXE
09/09/13 09:45:16
N
API: EndDoc
09/09/13 09:45:16
N
Copies: 1
09/09/13 09:45:16
N
Doc: Microsoft Word - Documento1
09/09/13 09:45:16
N
Printer: CyberClient
09/09/13 09:45:16
N
Pages: 1
09/09/13 09:45:16
N
Params: 1819701406
09/09/13 09:45:16
F
VB: C:\Program Files\Microsoft Office\Office14\W
INWORD.EXE|||EndDoc|||dc: 1948325441; doc: "Microsoft Word - Documento1"|||Cyber
Client|||2|||1|||1
09/09/13 09:45:16
I
Sending IPC to: VentanaCyberClient1
09/09/13 09:45:16
I
** Impresion NO excluida
09/09/13 09:45:16
I
Answer: 255
09/09/13 09:45:28
A
-> NtTerminateProcessCallback
09/09/13 09:45:28
R
La victima es chrome.exe Asesino chrome.exe
09/09/13 09:45:29
A
-> NtTerminateProcessCallback
09/09/13 09:45:29
R
La victima es chrome.exe Asesino chrome.exe
09/09/13 09:45:30
A
-> NtTerminateProcessCallback
09/09/13 09:45:30
R
La victima es chrome.exe Asesino chrome.exe
09/09/13 09:45:30
A
-> NtTerminateProcessCallback
09/09/13 09:45:30
R
La victima es chrome.exe Asesino chrome.exe
09/09/13 09:45:30
A
-> NtTerminateProcessCallback
09/09/13 09:45:30
A
-> NtTerminateProcessCallback
09/09/13 09:45:53
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH
09/09/13 09:46:08
A
-> NtTerminateProcessCallback
09/09/13 09:46:08
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_DETACH
09/09/13 09:46:46
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH
09/09/13 09:46:49
A
-> NtTerminateProcessCallback
09/09/13 09:46:49
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_DETACH
09/09/13 09:47:32
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH
09/09/13 09:47:33
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH
09/09/13 09:47:47
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH
09/09/13 09:47:48
A
-> NtTerminateProcessCallback
09/09/13 09:47:48
R
La victima es chrome.exe Asesino chrome.exe
09/09/13 09:48:04
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH
09/09/13 09:48:18
A
-> CreateDCWCallback
09/09/13 09:48:18
F
lpszDevice: \\.\DISPLAY1
09/09/13 09:48:18
A
-> CreateDCWCallback
09/09/13 09:48:18
F
lpszDevice: \\.\DISPLAY1
09/09/13 09:48:52
D
Enter DllMain -> Handle: 1819475968 - Reason for
call: DLL_PROCESS_ATTACH

09/09/13 09:49:03
D
call: DLL_PROCESS_ATTACH
09/09/13 09:49:05
A
09/09/13 09:49:05
R
09/09/13 10:00:02
D
call: DLL_PROCESS_ATTACH
09/09/13 10:00:05
D
call: DLL_PROCESS_ATTACH
09/09/13 10:00:06
A
09/09/13 10:00:06
R
09/09/13 10:11:09
A
09/09/13 10:11:09
R
09/09/13 10:11:10
A
09/09/13 10:11:10
R
09/09/13 10:12:10
A
09/09/13 10:12:10
D
call: DLL_PROCESS_DETACH
09/09/13 10:12:15
A
09/09/13 10:12:15
R
09/09/13 10:12:15
A
09/09/13 10:12:15
R
09/09/13 10:12:15
A
09/09/13 10:12:15
A
09/09/13 10:12:17
A
09/09/13 10:12:17
D
call: DLL_PROCESS_DETACH
09/09/13 10:12:19
D
call: DLL_PROCESS_ATTACH
09/09/13 10:12:20
D
call: DLL_PROCESS_ATTACH
09/09/13 10:13:05
A
09/09/13 10:13:05
F
09/09/13 10:13:05
A
09/09/13 10:13:05
F
09/09/13 10:13:56
A
09/09/13 10:13:56
R
09/09/13 10:13:56
A
09/09/13 10:13:56
R
09/09/13 10:13:56
A
09/09/13 10:13:56
A
09/09/13 10:13:58
D
call: DLL_PROCESS_ATTACH
09/09/13 10:13:58
D
call: DLL_PROCESS_ATTACH
09/09/13 10:14:43
A
09/09/13 10:14:43
F
09/09/13 10:14:43
A
09/09/13 10:14:43
F
09/09/13 10:21:04
D
call: DLL_PROCESS_ATTACH
09/09/13 10:21:54
A
09/09/13 10:21:54
D
call: DLL_PROCESS_DETACH
09/09/13 10:21:59
D
call: DLL_PROCESS_ATTACH
09/09/13 10:22:04
D
call: DLL_PROCESS_ATTACH
09/09/13 10:22:04
A
09/09/13 10:22:07
A
09/09/13 10:22:07
D

Enter DllMain -> Handle: 1819475968 - Reason for


-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for

call: DLL_PROCESS_ATTACH
09/09/13 10:22:07
D
call: DLL_PROCESS_DETACH
09/09/13 10:22:07
D
call: DLL_PROCESS_ATTACH
09/09/13 10:22:07
A
09/09/13 10:22:07
D
call: DLL_PROCESS_DETACH
09/09/13 10:22:12
A
09/09/13 10:22:12
R
09/09/13 10:22:39
D
call: DLL_PROCESS_ATTACH
09/09/13 10:22:41
D
call: DLL_PROCESS_ATTACH
09/09/13 10:22:44
A
09/09/13 10:23:56
A
09/09/13 10:23:56
R
09/09/13 10:23:56
A
09/09/13 10:23:56
D
call: DLL_PROCESS_DETACH
09/09/13 10:29:39
D
call: DLL_PROCESS_ATTACH
09/09/13 10:30:01
A
09/09/13 10:30:01
D
call: DLL_PROCESS_DETACH
09/09/13 10:30:09
A
09/09/13 10:30:09
R
09/09/13 10:30:09
A
09/09/13 10:30:09
R
09/09/13 10:30:10
A
09/09/13 10:30:10
A
09/09/13 10:30:12
D
call: DLL_PROCESS_ATTACH
09/09/13 10:30:13
D
call: DLL_PROCESS_ATTACH
09/09/13 10:30:58
A
09/09/13 10:30:58
F
09/09/13 10:30:58
A
09/09/13 10:30:58
F
09/09/13 10:36:59
D
call: DLL_PROCESS_ATTACH
09/09/13 10:37:01
D
call: DLL_PROCESS_ATTACH
09/09/13 10:37:04
A
09/09/13 10:37:18
A
09/09/13 10:37:18
A
09/09/13 10:37:18
O
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:18
A
09/09/13 10:37:18
A
09/09/13 10:37:18
A
09/09/13 10:37:18
O
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:18
F
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:18
A
09/09/13 10:37:18
A

Enter DllMain -> Handle: 1819475968 - Reason for


Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
La victima es Asesino WINWORD.EXE
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack

09/09/13 10:37:18
A
09/09/13 10:37:18
O
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:18
F
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:18
A
09/09/13 10:37:18
A
09/09/13 10:37:18
A
09/09/13 10:37:18
O
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:18
F
09/09/13 10:37:18
V
09/09/13 10:37:18
V
09/09/13 10:37:25
A
09/09/13 10:37:25
R
09/09/13 10:37:25
A
09/09/13 10:37:25
D
call: DLL_PROCESS_DETACH
09/09/13 10:48:47
D
call: DLL_PROCESS_ATTACH
09/09/13 10:51:24
D
call: DLL_PROCESS_ATTACH
09/09/13 10:51:24
A
09/09/13 10:51:24
D
call: DLL_PROCESS_DETACH
09/09/13 10:51:32
A
09/09/13 10:51:32
D
call: DLL_PROCESS_DETACH
09/09/13 10:51:35
D
call: DLL_PROCESS_ATTACH
09/09/13 10:51:35
A
09/09/13 10:51:35
D
call: DLL_PROCESS_DETACH
09/09/13 10:52:43
A
09/09/13 10:52:43
D
call: DLL_PROCESS_ATTACH
09/09/13 10:52:43
A
09/09/13 10:52:43
D
call: DLL_PROCESS_DETACH
09/09/13 10:52:44
D
call: DLL_PROCESS_ATTACH
09/09/13 10:52:48
D
call: DLL_PROCESS_ATTACH
09/09/13 10:52:48
A
09/09/13 10:52:48
D
call: DLL_PROCESS_ATTACH
09/09/13 10:52:48
D
call: DLL_PROCESS_DETACH
09/09/13 10:52:49
A
09/09/13 10:52:49
R
09/09/13 10:52:52
A
09/09/13 10:52:52
R
09/09/13 10:52:52
A
09/09/13 10:52:52
R
09/09/13 10:52:52
A
09/09/13 10:52:52
A
09/09/13 10:52:54
D

-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> CreateDCWCallback
-> DocumentPropertiesWCallBack
-> DocumentPropertiesWCallBack
Impresora Final: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
lpszDevice: CyberClient
DevMode Impresora: CyberClient
DevMode Copies: 1
-> NtTerminateProcessCallback
La victima es WINWORD.EXE Asesino WINWORD.EXE
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
La victima es chrome.exe Asesino chrome.exe
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for

call: DLL_PROCESS_ATTACH
09/09/13 10:52:54
D
call: DLL_PROCESS_ATTACH
09/09/13 10:53:39
A
09/09/13 10:53:39
F
09/09/13 10:53:39
A
09/09/13 10:53:39
F
09/09/13 10:53:59
D
call: DLL_PROCESS_ATTACH
09/09/13 10:56:45
D
call: DLL_PROCESS_ATTACH
09/09/13 10:56:45
A
09/09/13 10:56:45
D
call: DLL_PROCESS_DETACH
09/09/13 10:57:28
D
call: DLL_PROCESS_ATTACH
09/09/13 10:57:28
A
09/09/13 10:57:28
D
call: DLL_PROCESS_DETACH
09/09/13 10:57:43
D
call: DLL_PROCESS_ATTACH
09/09/13 10:57:43
A
09/09/13 10:57:43
D
call: DLL_PROCESS_DETACH
09/09/13 10:58:29
D
call: DLL_PROCESS_ATTACH
09/09/13 10:58:29
A
09/09/13 10:58:29
D
call: DLL_PROCESS_DETACH
09/09/13 10:58:38
D
call: DLL_PROCESS_ATTACH
09/09/13 10:58:38
A
09/09/13 10:58:38
D
call: DLL_PROCESS_DETACH
09/09/13 10:58:43
D
call: DLL_PROCESS_ATTACH
09/09/13 10:58:43
A
09/09/13 10:58:43
D
call: DLL_PROCESS_DETACH
09/09/13 10:59:21
D
call: DLL_PROCESS_ATTACH
09/09/13 10:59:21
A
09/09/13 10:59:21
D
call: DLL_PROCESS_DETACH
09/09/13 10:59:22
A
09/09/13 10:59:22
D
call: DLL_PROCESS_DETACH
09/09/13 10:59:23
D
call: DLL_PROCESS_ATTACH
09/09/13 10:59:23
A
09/09/13 10:59:23
D
call: DLL_PROCESS_DETACH
09/09/13 10:59:26
D
call: DLL_PROCESS_ATTACH
09/09/13 10:59:26
D
call: DLL_PROCESS_ATTACH
09/09/13 10:59:26
A
09/09/13 10:59:26
D
call: DLL_PROCESS_DETACH
09/09/13 10:59:26
A

Enter DllMain -> Handle: 1819475968 - Reason for


-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
-> CreateDCWCallback
lpszDevice: \\.\DISPLAY1
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback

09/09/13 10:59:26
D
call: DLL_PROCESS_DETACH
09/09/13 10:59:31
D
call: DLL_PROCESS_ATTACH
09/09/13 10:59:54
A
09/09/13 10:59:54
D
call: DLL_PROCESS_DETACH
09/09/13 11:00:24
D
call: DLL_PROCESS_ATTACH
09/09/13 11:12:49
D
call: DLL_PROCESS_ATTACH
09/09/13 11:12:50
D
call: DLL_PROCESS_ATTACH
09/09/13 11:12:51
D
call: DLL_PROCESS_ATTACH
09/09/13 11:12:53
A
09/09/13 11:12:53
R
09/09/13 11:12:54
A
09/09/13 11:13:29
D
call: DLL_PROCESS_ATTACH
09/09/13 11:13:30
A
09/09/13 11:13:30
D
call: DLL_PROCESS_DETACH
09/09/13 11:17:31
A
09/09/13 11:17:31
D
call: DLL_PROCESS_DETACH
09/09/13 11:17:32
D
call: DLL_PROCESS_ATTACH
09/09/13 11:19:19
D
call: DLL_PROCESS_ATTACH
09/09/13 11:19:25
A
09/09/13 11:19:25
D
call: DLL_PROCESS_DETACH
09/09/13 11:19:30
A
09/09/13 11:19:30
D
call: DLL_PROCESS_DETACH
09/09/13 11:21:16
D
call: DLL_PROCESS_ATTACH
09/09/13 11:21:16
D
call: DLL_PROCESS_ATTACH
09/09/13 11:21:16
D
call: DLL_PROCESS_ATTACH
09/09/13 11:21:18
A
09/09/13 11:21:18
R
09/09/13 11:21:21
A
09/09/13 11:21:33
A
09/09/13 11:21:33
D
call: DLL_PROCESS_DETACH
09/09/13 11:22:57
A
09/09/13 11:22:57
D
call: DLL_PROCESS_DETACH
09/09/13 11:23:27
D
call: DLL_PROCESS_ATTACH
09/09/13 11:23:27
D
call: DLL_PROCESS_ATTACH
09/09/13 11:23:28
A
09/09/13 11:23:28
R
09/09/13 11:23:31
D
call: DLL_PROCESS_ATTACH
09/09/13 11:23:32
A

Enter DllMain -> Handle: 1819475968 - Reason for


Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es AcroRd32.exe Asesino Explorer.EXE
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es AcroRd32.exe Asesino Explorer.EXE
-> NtTerminateProcessCallback
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
La victima es AcroRd32.exe Asesino Explorer.EXE
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback

09/09/13 11:24:03
D
call: DLL_PROCESS_ATTACH
09/09/13 11:24:04
A
09/09/13 11:24:04
D
call: DLL_PROCESS_DETACH
09/09/13 11:28:05
A
09/09/13 11:28:05
D
call: DLL_PROCESS_DETACH

Enter DllMain -> Handle: 1819475968 - Reason for


-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for
-> NtTerminateProcessCallback
Enter DllMain -> Handle: 1819475968 - Reason for

You might also like