

"WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\AUTOITV3") "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADOBE FLASH PLAYER NPAPI") "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ADDRESSBOOK") "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL") "WINWORD.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL") "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\CMD.EXE") "WINWORD.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\CMD.EXE") "WINWORD.EXE" (Path: "HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\WINWORD.EXE") "WINWORD.EXE" (Path: "HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\WINWORD.EXE") All indicators are available only in the private webservice or standalone version."WINWORD.EXE" wrote bytes "103b8b33" to virtual address "0圆3B80BA8" (part of module "MSO.DLL") "WINWORD.EXE" wrote bytes "e99a54b0ec" to virtual address "0x76E53E59" wrote bytes "50e84233" to virtual address "0圆A2BF530" (part of module "WWLIB.DLL") "WINWORD.EXE" wrote bytes "e440a113" to virtual address "0圆9D042C4" (part of module "MSPROOF7.DLL") "WINWORD.EXE" wrote bytes "0ba70730" to virtual address "0x2F161B94" (part of module "WINWORD.EXE") "WINWORD.EXE" wrote bytes "9f491b10" to virtual address "0圆C431F20" (part of module "VBE7.DLL") "WINWORD.EXE" wrote bytes "e92399b3ec" to virtual address "0x76E55DEE" wrote bytes "4fd76a32" to virtual address "0圆CF710AC" (part of module "MSPTLS.DLL") "WINWORD.EXE" wrote bytes "9e994233" to virtual address "0圆4B878E4" (part of module "OART.DLL") "WINWORD.EXE" wrote bytes "218f5632" to virtual address "0圆C8F9904" (part of module "RICHED20.DLL") "WINWORD.EXE" wrote bytes "e93655b1ec" to virtual address "0x76E53EAE" wrote bytes "e99e48daed" to virtual address "0x75B83D01" wrote bytes "bac0fd9205b98b7b366cffe1" to virtual address "0x05972C1A" "WINWORD.EXE" wrote bytes "e78d4233" to virtual address "0圆DA2CA70" (part of module "GFX.DLL")
