I found another regression
"Avira Antivir Personal 6.35.00.243" from http://www.oldversion.com/windows/avira-antivir-6-35-00-243
-install the app
-at end of setup select to not "show the readme.txt"
-at end of setup select to not "start an update"
the app very quickly does "scanning the process list" (very fast)
then it will start to scan the drive C
like in 0.4.10-dev-135-gffa94ca_okScans.webm
like in 0.4.10-dev-135-gffa94ca_okScans.log
the app hangs for 5minutes within "scanning the process list"
Each minute it will log, please note there is no filename in LoadLibraryExW()-call
After exactly 5minutes of inactivity it will simply close the window and log
the guilty commit is reactos-bootcd-0.4.10-dev-136-gc7eb46d