MyCity » Ambulanta -> Arhiva Ambulante » Combofix opasan?

Combofix opasan?

Napisano na dan: 11.1.2008
2

Combofix opasan?
Pagination Prethodna strana

Idi na vrh

Poslao: 13 Jan 2008 16:39
Idi na vrh
offline
  • Dejvid 
  • Novi MyCity građanin
  • Pridružio: 11 Jan 2008
  • Poruke: 20

GMER 1.0.13.12551 - gmer.net
Rootkit scan 2008-01-13 16:40:43
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.13 ----

SSDT sptd.sys ZwCreateKey
SSDT sptd.sys ZwEnumerateKey
SSDT sptd.sys ZwEnumerateValueKey
SSDT sptd.sys ZwOpenKey
SSDT sptd.sys ZwQueryKey
SSDT sptd.sys ZwQueryValueKey
SSDT sptd.sys ZwSetValueKey

---- Kernel code sections - GMER 1.0.13 ----

.text ntoskrnl.exe!_abnormal_termination + F3 804E2DC4 1 Byte [ B0 ]
.text ntoskrnl.exe!_abnormal_termination + F5 804E2DC6 2 Bytes [ 43, F8 ]
? C:\WINDOWS\system32\drivers\sptd.sys The process cannot access the file because it is being used by another process.
.text USBPORT.SYS!DllUnload F73F662C 5 Bytes JMP 820C9960
? C:\WINDOWS\System32\Drivers\dtscsi.sys The process cannot access the file because it is being used by another process.

---- Kernel IAT/EAT - GMER 1.0.13 ----

IAT \WINDOWS\System32\Drivers\SCSIPORT.SYS[ntoskrnl.exe!IoConnectInterrupt] [F8453480] sptd.sys
IAT pci.sys[ntoskrnl.exe!IoDetachDevice] [F845342C] sptd.sys
IAT pci.sys[ntoskrnl.exe!IoAttachDeviceToDeviceStack] [F846DA6E] sptd.sys
IAT atapi.sys[ntoskrnl.exe!IoConnectInterrupt] [F8453480] sptd.sys
IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F843FABA] sptd.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F843FC00] sptd.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F843FB82] sptd.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F844072E] sptd.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F8440604] sptd.sys
IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F8452A9A] sptd.sys

---- Devices - GMER 1.0.13 ----

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 823691D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 823691D8

AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [F8A8E404] avg7rsw.sys

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLOSE 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_WRITE 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_INFORMATION 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_INFORMATION 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_EA 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FLUSH_BUFFERS 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_VOLUME_INFORMATION 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_VOLUME_INFORMATION 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DIRECTORY_CONTROL 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FILE_SYSTEM_CONTROL 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DEVICE_CONTROL 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SHUTDOWN 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_LOCK_CONTROL 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLEANUP 82094558
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_PNP 82094558
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 820C8980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 820C8980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 820C8980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 820C8980
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 823D61D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 823D61D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 820C8980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 820C8980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 820C8980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 820C8980
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 8236B1D8

AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE [F8586894] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE_NAMED_PIPE [F858686C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLOSE [F8586894] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ [F85868D0] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE [F85868D0] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_QUERY_INFORMATION [F85868E4] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SET_INFORMATION [F85868F8] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_QUERY_EA [F858690C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SET_EA [F8586920] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS [F8586934] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_QUERY_VOLUME_INFORMATION [F8586948] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SET_VOLUME_INFORMATION [F858695C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DIRECTORY_CONTROL [F8586970] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FILE_SYSTEM_CONTROL [F8586984] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL [F8586998] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL [F85869AC] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN [F85869C0] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_LOCK_CONTROL [F85869D4] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP [F85869E8] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE_MAILSLOT [F85869FC] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_QUERY_SECURITY [F8586A10] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SET_SECURITY [F8586A24] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER [F8586A38] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL [805025E4] ntoskrnl.exe
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CHANGE [F8586A4C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_QUERY_QUOTA [F8586A60] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SET_QUOTA [F8586A74] TPkd.sys

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 8236B1D8

AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE [F8586894] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE_NAMED_PIPE [F858686C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLOSE [F8586894] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ [F85868D0] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE [F85868D0] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_QUERY_INFORMATION [F85868E4] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SET_INFORMATION [F85868F8] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_QUERY_EA [F858690C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SET_EA [F8586920] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS [F8586934] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_QUERY_VOLUME_INFORMATION [F8586948] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SET_VOLUME_INFORMATION [F858695C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DIRECTORY_CONTROL [F8586970] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FILE_SYSTEM_CONTROL [F8586984] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL [F8586998] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL [F85869AC] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN [F85869C0] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_LOCK_CONTROL [F85869D4] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP [F85869E8] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE_MAILSLOT [F85869FC] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_QUERY_SECURITY [F8586A10] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SET_SECURITY [F8586A24] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER [F8586A38] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL [805025E4] ntoskrnl.exe
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CHANGE [F8586A4C] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_QUERY_QUOTA [F8586A60] TPkd.sys
AttachedDevice \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SET_QUOTA [F8586A74] TPkd.sys

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 820CC600
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 820CC600
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 820CC600
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_CREATE 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_CLOSE 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_INTERNAL_DEVICE_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_POWER 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_SYSTEM_CONTROL 8236A1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-e IRP_MJ_PNP 8236A1D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 81F4C980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 81F4C980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 81F4C980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 81F4C980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 81F4C980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 81F4C980
Device \Driver\00000065 \Device\0000004b IRP_MJ_POWER [F844DC7E] sptd.sys
Device \Driver\00000065 \Device\0000004b IRP_MJ_SYSTEM_CONTROL [F84672A2] sptd.sys
Device \Driver\00000065 \Device\0000004b IRP_MJ_PNP [F8468228] sptd.sys
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 81F4C980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE 81F4C980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL 81F4C980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL 81F4C980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP 81F4C980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP 81F4C980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE 820C8980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE 820C8980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER 820C8980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 820C8980
Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP 820C8980
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 821AC1D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 821AC1D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{E82D086A-1620-4BAE-A5D5-936D3CE93641} IRP_MJ_CREATE 81F4C980
Device \Driver\NetBT \Device\NetBT_Tcpip_{E82D086A-1620-4BAE-A5D5-936D3CE93641} IRP_MJ_CLOSE 81F4C980
Device \Driver\NetBT \Device\NetBT_Tcpip_{E82D086A-1620-4BAE-A5D5-936D3CE93641} IRP_MJ_DEVICE_CONTROL 81F4C980
Device \Driver\NetBT \Device\NetBT_Tcpip_{E82D086A-1620-4BAE-A5D5-936D3CE93641} IRP_MJ_INTERNAL_DEVICE_CONTROL 81F4C980
Device \Driver\NetBT \Device\NetBT_Tcpip_{E82D086A-1620-4BAE-A5D5-936D3CE93641} IRP_MJ_CLEANUP 81F4C980
Device \Driver\NetBT \Device\NetBT_Tcpip_{E82D086A-1620-4BAE-A5D5-936D3CE93641} IRP_MJ_PNP 81F4C980
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 8236B1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 8236B1D8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_CREATE 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_CLOSE 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_POWER 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1Port2Path0Target0Lun0 IRP_MJ_PNP 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_CREATE 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_CLOSE 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_DEVICE_CONTROL 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_INTERNAL_DEVICE_CONTROL 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_POWER 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_SYSTEM_CONTROL 821122A8
Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_PNP 821122A8
Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_CLOSE 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_READ 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_WRITE 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_EA 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP 82094558
Device \FileSystem\Fastfat \Fat IRP_MJ_PNP 82094558

AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_NAMED_PIPE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLOSE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_READ [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_WRITE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_EA [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_INTERNAL_DEVICE_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_MAILSLOT [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_SECURITY [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_SECURITY [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_POWER [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SYSTEM_CONTROL [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CHANGE [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_QUOTA [F8A8E404] avg7rsw.sys
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_QUOTA [F8A8E404] avg7rsw.sys

Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 81FDE980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 81FDE980

---- Files - GMER 1.0.13 ----

ADS C:\Documents and Settings\David\My Documents\Kne:KAVICHS
ADS C:\Documents and Settings\David\My Documents\Po:KAVICHS
ADS C:\Documents and Settings\David\My Documents\Zakoni\Zakon o izvr:KAVICHS
ADS C:\Documents and Settings\David\My Documents\:KAVICHS
ADS C:\Documents and Settings\David\My Documents\:KAVICHS

---- EOF - GMER 1.0.13 ----

Poslao: 13 Jan 2008 16:53
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Poslao: 14 Jan 2008 04:01
Idi na vrh
offline
  • Dejvid 
  • Novi MyCity građanin
  • Pridružio: 11 Jan 2008
  • Poruke: 20

Svaka cast dr. Boro, alal' vera za ciscenje mog kompa od zlog zlog malware-a! Hvala.

MyCity » Ambulanta -> Arhiva Ambulante » Combofix opasan?

Ko je trenutno na forumu
 

Ukupno su 1165 korisnika na forumu :: 38 registrovanih, 5 sakrivenih i 1122 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: bojcistv, Boris BM, botta, CikaKURE, comi_pfc, d bos, doktor1964, doom83, Dvojac005, galerija, HrcAk47, krkalon, Kubovac, kybonacci, Leonov, Luka Blažević, MB120mm, Mi lao shu, mik7, Mikulino, Milos82, milutin134, Mlav, mocnijogurt, mrav pesadinac, nemkea71, nikoladim, opt1, Parker, procesor, RJ, shone34, stegonosa, tomigun, Trpe Grozni, vlajkox, žeks62, 1107