Edit C:\Program Files (x86)\360\Total Security\softmgr\360elam.sys
MZ? ?? ? @ P ? ? ?!?L?!This program cannot be run in DOS mode. $ ??[?xC?K??????q???,A??D??L??A??yT?#???@j?@'qC?|?)U?p?\l???{?,????h<B[t?;?F?BD??v? ?@[(? 1????Ro?p?!ZE????K^>? ????`???`???`???`???`?????`?????`??f ???`??f !??`??f ???`??Rich?`?? PE L ?K^ ? @P @ ? ?D @E pP ( ` ? ?! p H 0 8 h ? .text h.rdata ? @ H.data 4 0 @ ?PAGE j @ `INIT P b.rsrc ` @ B.reloc H p @ B ??% @ ?% @ ?P ?P ?P @ @ @ @P ?K^ R ! ?K^ , \! \ ? 1@ @ @ E RSDSo?a?8??D?? ??? C:\vmagent_new\bin\joblist\421708\out\Release\360elam.pdb .text$mn .idata$5 .00cfg .gfids 0 ? .rdata ! ? .rdata$zzzdbg 0 $ .data $1 .bss @ j PAGE P p INIT pP .idata$2 ?P .idata$3 ?P .idata$4 ?P d .idata$6 ` .rsrc$01 a .rsrc$02 RSA1 ???nN?n??4?3?-:S7??+?:??'??q?Jz??]A6"d$??O?T?B??qI? b??(?A8m??F?- ?&cE<?2??Ea?a?H?n?3I`X????%?<?!?f?eO7?2??C?v???AT??Y??*?? ?? \????????wiX+`oSX??L*?^7#R?\??v???g?G???? ALf+j? G` T??`3?g&k??_??s5(??4????Id@??L? N?@???D U??E?? t??u?E? ]? ??????,1@ ??th3EgcP? @ ?%,1@ ?01@ ??th3EgsP? @ ?%01@ ?$1@ ??tP????? U??h$1@ h @@ ?????$1@ ??u? ???E?@4 @@ 3?]? ???????????????U??? ]?????1@ ??t=N?@?t?? 1@ ?jY?)???P ?P ?P ?P ?P ? ExFreePoolWithTag :IoRegisterBootDriverCallback ?IoUnregisterBootDriverCallback ntoskrnl.exe ? ? ? 8 ? ? ?P ? h ? ? ? pd ? a p M S E L A M C E R T I N F O I D M I C R O S O F T E L A M C E R T I F I C A T E I N F O p4 V S _ V E R S I O N _ I N F O ??? ? ? S t r i n g F i l e I n f o ? 0 8 0 4 0 4 b 0 ( C o m m e n t s 3 6 0 E l a m . C o m p a n y N a m e 3 6 0 . c n H F i l e D e s c r i p t i o n 3 6 0 ?[hQkS?X (gl?2?kp?X!jWW 6 F i l e V e r s i o n 1 . 0 . 0 . 1 0 3 0 8 I n t e r n a l N a m e 3 6 0 E l a m . s y s n % L e g a l C o p y r i g h t ( C ) 3 6 0 . c n I n c . A l l R i g h t s R e s e r v e d . ( L e g a l T r a d e m a r k s @ O r i g i n a l F i l e n a m e 3 6 0 E l a m . s y s P r i v a t e B u i l d 0 P r o d u c t N a m e 3 6 0 ?[hQkS?X : P r o d u c t V e r s i o n 1 . 0 . 0 . 1 0 3 0 S p e c i a l B u i l d D V a r F i l e I n f o $ T r a n s l a t i o n ? 6 9 0 0 6 0 4 2 9 3 9 6 e 5 8 3 3 9 1 f 8 f c 3 b 3 9 5 1 5 0 9 5 f 5 a 0 2 1 4 7 2 9 8 7 d d 0 9 c 1 1 c b 6 b a a 1 6 4 0 b b ? a e b 5 e b 8 6 8 7 d f a 7 c e e b 1 b 2 9 2 7 1 6 6 e b 1 2 0 2 d 9 c 7 0 2 6 8 c e 4 4 4 5 5 9 5 0 4 3 4 6 6 4 f 7 9 e 0 7 8 ? e 7 6 7 7 9 9 4 7 8 f 6 4 a 3 4 b 3 f 5 3 f f 3 b b 9 0 5 7 f e 1 7 6 8 f 4 a b 1 7 8 0 4 1 b 0 d c c 0 f f 1 e 2 1 0 c b a 6 5 ? 0 0 0?0?0?0 @ !01070=0M0S0Y0 P 0 00(0Q0c0 olWc3 6 0 e l a m . s y s ?K^ e??Z??Pr9?????5p?u,?,t?`?k??Z????<??G?#e#?_l9?????D???DQVC! ?6??9??k~?c?#?S?v ??5??????Y??3 ?Û?I?b-?2??;6? H&?n0??????W???\A?? ?*?SR5nh?'^?ù?????WD'38 ?????????hK??S??VE??o??{D)s?P?+??8???#]b???u?v?N?U[??@?~XJ#^???O?/?Q? ???6/~?Z?a/r??????J?b??3(\?Z??xx??u]????N?9n??m?:07????d??Q????o[r?*m?}!! =|I??4P7 E????nZ%6"W?????8?k?+ ?K??Y\J?E?|s?9?=x ??N??l???i%??<??I???ezC% ????S?????B???' ?z?9???ßbp?$??.2??_???lA ?? ?5???? ,n??. =82b?! 0?!? *?H?? ??!?0?!?10 `?He 0\ +?7?N0L0 +?70 ??? 010 `?He ?Wl????4ZyG?U?E????" G?1????0?'0??3 ?K?2?4Q? ?0 *?H?? 0~10 UUS10U Washington10URedmond10U Microsoft Corporation1(0&UMicrosoft Code Signing PCA 20100 190605173633Z 200603173633Z0??10 UUS10U Washington10URedmond10U Microsoft Corporation1>0<U5Microsoft Windows Early Launch Anti-malware Publisher0?"0 *?H?? ? 0? ? ???KF?D??U??\?M???; By <hy???,wV6i@/?&??Yj???=??:?>X???3??3M=?n????o'L?????&F?Hh?m????|???;???3XH?q???.y?f??0@?I?_?W?)?I??T@>#??/s?e?;?\+??????sj?????)?]f!'v??$ ?[?F+???V???".?G?????T?tgO???????????????p???dY ???0??0+U%$0" +?7 ' +?7=+0U??5d?'[.+?<??U$P*?Q0PUI0G?E0C1)0'U Microsoft Operations Puerto Rico10U 232841+4554640U#0???_{?"