I can't post the registry information.
The file is 350K at least.
I can't even post it as a .ZIP. (too many limitations on file type, size...ect)
It also can not be posted as a .TXT file because...lol...belive it or not it's 600KB!!
I'm trying to contribute and help out the best I can...
I already posted this info at the beginning of the thread, no?CreateKbThread
new CKbBuffer
CKbBuffer::Init
CKbBuffer::Init end
ZwCreateEvent(g_hStopEvent)
ZwAllocateVirtualMemory - stack
ZwGetContextThread - NtCurrentThread
ZwCreateThread - KbThread
CreateKbThread end
ZwInitializeRegistry
KbThread start
Unschedule
Unschedule end
ZwSetEvent(g_hInitEvent)
ReadRegistry
ReadRegistry end
CreateTemp
CreateTemp end
cmnbInit
SetFolders
InitKeyboard
s_dwKbdClassCnt: 2
InitKeyboard end
GetKey
SetFolders end
aswEnginDllMain(DLL_PROCESS_ATTACH)
InitLog
InitLog end
InitReport
InitReport end
CmdLine
C:\PROGRA~1\ALWILS~1\Avast4\aswBoot.exe /A:"*" /L:"English" /archives
CmdLine end
ZwCreateDirectoryObject - ASWObjects
LoadResources
LoadFile
LoadFile end
LoadResources end
CKbBuffer::Wait
CKbBuffer::Get
CKbBuffer::Get end
CKbBuffer::Wait end
FreeMemory: 471539712
aswintegInitialize
avworkInitialize
avworkInitialize Error:42003
aswintegClose
TerminateKbThread
GetKey end
CloseKeyboard
CloseKeyboard end
KbThread stop
CKbBuffer::~CKbBuffer
CKbBuffer::~CKbBuffer end
aswEnginDllMain(DLL_PROCESS_DETACH)
FreeResources
CloseReport
CloseLog