Hi,

I have tried to extract the process 1336 (1_doc_RCData_61) from the prolaco-Image provided at  http://malwarecookbook.googlecode.com/svn-history/r26/trunk/15/6/prolaco.vmem.zip

Neither procexedump nor procmemdump did work for this process but for any other.

What went wrong?

Regards

Michael