nie bede robil nowego tematu!! wiec mam taki samy problem nie pomoglo
- Kod: Zaznacz wszystko
Start >>> Uruchom >>> regedit i w kluczu:
Cytat:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}
W wartości IsInstalled zamien 1 na 0. Reset kompa i scaignij to zainstaluj:
http://www.microsoft.com/downloads/details.aspx?displaylang=pl&FamilyID=1e1550cb-5e5d-48f5-b02b-20b602228de6
skasuj:
plik C:\Program files\Internet Explorer\iexplore.old
robilem to 2 razy i nic to samo
- Kod: Zaznacz wszystko
Logfile of HijackThis v1.99.1
Scan saved at 16:02:14, on 2007-02-10
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\22M WLAN Adapter\WLANMON.exe
C:\Program Files\Mozilla Firefox\firefox.exe
F:\jarek\programy\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [startkey] C:\WINDOWS\System32\win.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [startkey] C:\WINDOWS\System32\win.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - Global Startup: 22M WLAN Adapter.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Download all links using BitComet - res://E:\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Download link using &BitComet - res://E:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: eBay - Homepage - {EF79EAC5-3452-4E02-B8BD-BA4C89F1AC7A} - C:\Program Files\IrfanView\Ebay\Ebay.htm
O16 - DPF: {5A09E43F-A0A7-4ABF-AF80-11367CF1DC8F} (MainControl Class) - http://mks.com.pl/skaner/SkanerOnline.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8E325D27-F621-4F34-9FF0-8B1EEA349E63}: NameServer = 192.168.0.1 194.204.152.34
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
[code]GMER 1.0.12.12011 - http://www.gmer.net
Rootkit scan 2007-02-10 17:34:24
Windows 5.1.2600
---- Services - GMER 1.0.12 ----
Service .NET CLR Data
Service .NET CLR Networking
Service .NETFramework
Service [DISABLED] Abiosdsk
Service [DISABLED] abp480n5
Service C:\WINDOWS\System32\DRIVERS\ACPI.sys [BOOT] ACPI
Service [DISABLED] ACPIEC
Service [DISABLED] adpu160m
Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec
Service C:\WINDOWS\System32\drivers\afd.sys [AUTO] AFD
Service C:\WINDOWS\System32\DRIVERS\agp440.sys [BOOT] agp440
Service [DISABLED] Aha154x
Service [DISABLED] aic78u2
Service [DISABLED] aic78xx
Service C:\WINDOWS\System32\svchost.exe [MANUAL] Alerter
Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG
Service [DISABLED] AliIde
Service C:\WINDOWS\System32\drivers\amon.sys [AUTO] AMON
Service [DISABLED] amsint
Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt
Service [DISABLED] asc
Service [DISABLED] asc3350p
Service [DISABLED] asc3550
Service C:\WINDOWS\System32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac
Service C:\WINDOWS\System32\DRIVERS\atapi.sys [BOOT] atapi
Service [DISABLED] Atdisk
Service C:\WINDOWS\System32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc
Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv
Service C:\WINDOWS\System32\DRIVERS\audstub.sys [MANUAL] audstub
Service C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [MANUAL] basic2
Service BattC
Service [SYSTEM] Beep
Service C:\WINDOWS\System32\svchost.exe [MANUAL] BITS
Service C:\WINDOWS\System32\svchost.exe [AUTO] Browser
Service [DISABLED] cbidf2k
Service [DISABLED] cd20xrnt
Service [SYSTEM] Cdaudio
Service [DISABLED] Cdfs
Service C:\WINDOWS\System32\DRIVERS\cdrom.sys [SYSTEM] Cdrom
Service [SYSTEM] Changer
Service C:\WINDOWS\System32\cisvc.exe [MANUAL] cisvc
Service C:\WINDOWS\system32\clipsrv.exe [MANUAL] ClipSrv
Service [DISABLED] CmdIde
Service C:\WINDOWS\System32\Drivers\CoachWdm.sys [AUTO] CoachWdm
Service C:\WINDOWS\System32\dllhost.exe [MANUAL] COMSysApp
Service ContentFilter
Service ContentIndex
Service [DISABLED] Cpqarray
Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc
Service [DISABLED] dac2w2k
Service [DISABLED] dac960nt
Service C:\WINDOWS\System32\svchost.exe [AUTO] Dhcp
Service C:\WINDOWS\System32\DRIVERS\disk.sys [BOOT] Disk
Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin
Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot
Service C:\WINDOWS\System32\drivers\dmio.sys [BOOT] dmio
Service C:\WINDOWS\System32\drivers\dmload.sys [BOOT] dmload
Service C:\WINDOWS\System32\svchost.exe [AUTO] dmserver
Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic
Service C:\WINDOWS\System32\svchost.exe [AUTO] Dnscache
Service [DISABLED] dpti2o
Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud
Service C:\WINDOWS\System32\Drivers\dtscsi.sys [MANUAL] dtscsi
Service C:\Program Files\Common Files\EPSON\EBAPI\SAgent2.exe [AUTO] EPSONStatusAgent2
Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc
Service C:\WINDOWS\system32\drivers\ES1370MP.sys [MANUAL] ES1370
Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog
Service C:\WINDOWS\System32\svchost.exe [MANUAL] EventSystem
Service C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [AUTO] Fallback
Service [DISABLED] Fastfat
Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility
Service C:\WINDOWS\System32\DRIVERS\fdc.sys [MANUAL] Fdc
Service [SYSTEM] Fips
Service C:\WINDOWS\System32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk
Service C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [AUTO] Fsks
Service [SYSTEM] Fs_Rec
Service C:\WINDOWS\System32\DRIVERS\ftdisk.sys [BOOT] Ftdisk
Service C:\WINDOWS\System32\DRIVERS\gameenum.sys [MANUAL] gameenum
Service C:\WINDOWS\System32\giveio.sys [BOOT] giveio
Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer
Service C:\WINDOWS\System32\DRIVERS\msgpc.sys [MANUAL] Gpc
Service C:\WINDOWS\System32\DRIVERS\hamachi.sys [MANUAL] hamachi
Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc
Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ
Service [DISABLED] hpn
Service [DISABLED] hpt3xx
Service C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [MANUAL] hsf_msft
Service [SYSTEM] i2omgmt
Service [DISABLED] i2omp
Service C:\WINDOWS\System32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt
Service C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [MANUAL] IDriverT
Service [SYSTEM] Imapi
Service C:\WINDOWS\System32\imapi.exe [MANUAL] ImapiService
Service inetaccs
Service [DISABLED] ini910u
Service Inport
Service C:\WINDOWS\System32\DRIVERS\intelide.sys [BOOT] IntelIde
Service C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver
Service C:\WINDOWS\System32\DRIVERS\ipinip.sys [MANUAL] IpInIp
Service C:\WINDOWS\System32\DRIVERS\ipnat.sys [MANUAL] IpNat
Service C:\WINDOWS\System32\DRIVERS\ipsec.sys [SYSTEM] IPSec
Service C:\WINDOWS\System32\DRIVERS\irenum.sys [MANUAL] IRENUM
Service ISAPISearch
Service C:\WINDOWS\System32\DRIVERS\isapnp.sys [BOOT] isapnp
Service C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [AUTO] K56
Service C:\WINDOWS\System32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass
Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer
Service [BOOT] KSecDD
Service C:\WINDOWS\System32\svchost.exe [AUTO] lanmanserver
Service C:\WINDOWS\System32\svchost.exe [AUTO] lanmanworkstation
Service [SYSTEM] lbrtfdc
Service ldap
Service LicenseService
Service C:\WINDOWS\System32\svchost.exe [AUTO] LmHosts
Service C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [AUTO] MDM
Service C:\WINDOWS\System32\svchost.exe [AUTO] Messenger
Service [SYSTEM] mnmdd
Service C:\WINDOWS\System32\mnmsrvc.exe [MANUAL] mnmsrvc
Service [MANUAL] Modem
Service C:\WINDOWS\system32\drivers\MODEMCSA.sys [MANUAL] MODEMCSA
Service C:\WINDOWS\System32\DRIVERS\mouclass.sys [SYSTEM] Mouclass
Service [BOOT] MountMgr
Service [DISABLED] mraid35x
Service C:\WINDOWS\System32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV
Service C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb
Service C:\WINDOWS\System32\msdtc.exe [MANUAL] MSDTC
Service [SYSTEM] Msfs
Service C:\WINDOWS\System32\msiexec.exe [MANUAL] MSIServer
Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV
Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK
Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM
Service [BOOT] Mup
Service [BOOT] NDIS
Service C:\WINDOWS\System32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi
Service C:\WINDOWS\System32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio
Service C:\WINDOWS\System32\DRIVERS\ndiswan.sys [MANUAL] NdisWan
Service [MANUAL] NDProxy
Service C:\WINDOWS\System32\DRIVERS\netbios.sys [SYSTEM] NetBIOS
Service C:\WINDOWS\System32\DRIVERS\netbt.sys [SYSTEM] NetBT
Service C:\WINDOWS\system32\netdde.exe [MANUAL] NetDDE
Service C:\WINDOWS\system32\netdde.exe [MANUAL] NetDDEdsdm
Service C:\WINDOWS\System32\lsass.exe [MANUAL] Netlogon
Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman
Service C:\WINDOWS\System32\svchost.exe [MANUAL] Nla
Service C:\Program Files\Eset\nod32krn.exe [AUTO] NOD32krn
Service C:\WINDOWS\system32\drivers\nmwcdc.sys [MANUAL] Nokia USB Generic
Service C:\WINDOWS\system32\drivers\nmwcdcm.sys [MANUAL] Nokia USB Modem
Service C:\WINDOWS\system32\drivers\nmwcd.sys [MANUAL] Nokia USB Phone Parent
Service [SYSTEM] Npfs
Service [DISABLED] Ntfs
Service C:\WINDOWS\System32\lsass.exe [MANUAL] NtLmSsp
Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc
Service [SYSTEM] Null
Service C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [MANUAL] nv
Service C:\WINDOWS\System32\DRIVERS\nv4.sys [MANUAL] nv4
Service C:\WINDOWS\System32\nvsvc32.exe [AUTO] NVSvc
Service C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt
Service C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd
Service C:\WINDOWS\system32\drivers\oreans32.sys [SYSTEM] oreans32
Service C:\WINDOWS\System32\DRIVERS\parport.sys [MANUAL] Parport
Service [BOOT] PartMgr
Service [AUTO] ParVdm
Service C:\WINDOWS\System32\DRIVERS\pci.sys [BOOT] PCI
Service [SYSTEM] PCIDump
Service [DISABLED] PCIIde
Service [DISABLED] Pcmcia
Service [MANUAL] PDCOMP
Service [MANUAL] PDFRAME
Service [MANUAL] PDRELI
Service [MANUAL] PDRFRAME
Service [DISABLED] perc2
Service [DISABLED] perc2hib
Service PerfDisk
Service PerfNet
Service PerfOS
Service PerfProc
Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay
Service C:\WINDOWS\System32\lsass.exe [AUTO] PolicyAgent
Service C:\WINDOWS\System32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport
Service C:\WINDOWS\System32\DRIVERS\processr.sys [SYSTEM] Processor
Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage
Service C:\WINDOWS\System32\DRIVERS\psched.sys [MANUAL] PSched
Service C:\WINDOWS\System32\DRIVERS\ptilink.sys [MANUAL] Ptilink
Service [DISABLED] ql1080
Service [DISABLED] Ql10wnt
Service [DISABLED] ql12160
Service [DISABLED] ql1240
Service [DISABLED] ql1280
Service C:\WINDOWS\System32\DRIVERS\rasacd.sys [SYSTEM] RasAcd
Service C:\WINDOWS\System32\svchost.exe [MANUAL] RasAuto
Service C:\WINDOWS\System32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp
Service C:\WINDOWS\System32\svchost.exe [MANUAL] RasMan
Service C:\WINDOWS\System32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe
Service C:\WINDOWS\System32\DRIVERS\raspti.sys [MANUAL] Raspti
Service C:\WINDOWS\System32\DRIVERS\rdbss.sys [SYSTEM] Rdbss
Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD
Service RDPDD
Service C:\WINDOWS\System32\DRIVERS\rdpdr.sys [MANUAL] rdpdr
Service RDPNP
Service [MANUAL] RDPWD
Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr
Service C:\WINDOWS\System32\DRIVERS\redbook.sys [SYSTEM] redbook
Service C:\WINDOWS\System32\svchost.exe [DISABLED] RemoteAccess
Service C:\WINDOWS\system32\svchost.exe [AUTO] RemoteRegistry
Service C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [MANUAL] Rksample
Service C:\WINDOWS\System32\locator.exe [MANUAL] RpcLocator
Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs
Service C:\WINDOWS\System32\rsvp.exe [MANUAL] RSVP
Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs
Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardDrv
Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr
Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule
Service C:\WINDOWS\System32\DRIVERS\secdrv.sys [AUTO] Secdrv
Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon
Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS
Service C:\WINDOWS\System32\DRIVERS\serenum.sys [MANUAL] serenum
Service C:\WINDOWS\System32\DRIVERS\serial.sys [SYSTEM] Serial
Service C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe [MANUAL] ServiceLayer
Service [SYSTEM] Sfloppy
Service C:\WINDOWS\System32\svchost.exe [MANUAL] SharedAccess
Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection
Service [DISABLED] Simbad
Service C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [AUTO] SoftFax
Service [DISABLED] Sparrow
Service C:\WINDOWS\System32\DRIVERS\HSF_SPKP.sys [AUTO] SpeakerPhone
Service C:\WINDOWS\System32\speedfan.sys [BOOT] speedfan
Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter
Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler
Service C:\WINDOWS\System32\Drivers\sptd.sys [BOOT] sptd
Service C:\WINDOWS\System32\DRIVERS\sr.sys [DISABLED] sr
Service C:\WINDOWS\System32\svchost.exe [AUTO] srservice
Service C:\WINDOWS\System32\DRIVERS\srv.sys [MANUAL] Srv
Service C:\WINDOWS\System32\svchost.exe [MANUAL] SSDPSRV
Service C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe [AUTO] StarWindService
Service C:\WINDOWS\System32\svchost.exe [AUTO] stisvc
Service C:\WINDOWS\System32\DRIVERS\swenum.sys [MANUAL] swenum
Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi
Service C:\WINDOWS\System32\dllhost.exe [MANUAL] SwPrv
Service [DISABLED] symc810
Service [DISABLED] symc8xx
Service [DISABLED] sym_hi
Service [DISABLED] sym_u3
Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio
Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog
Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv
Service C:\WINDOWS\System32\DRIVERS\tcpip.sys [SYSTEM] Tcpip
Service [MANUAL] TDPIPE
Service [MANUAL] TDTCP
Service C:\WINDOWS\System32\DRIVERS\termdd.sys [SYSTEM] TermDD
Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService
Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes
Service C:\WINDOWS\System32\DRIVERS\tiacxln.sys [MANUAL] TIACXLN
Service C:\WINDOWS\System32\tlntsvr.exe [MANUAL] TlntSvr
Service C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [AUTO] Tones
Service [DISABLED] TosIde
Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks
Service TSDDD
Service [DISABLED] Udfs
Service [DISABLED] ultra
Service C:\WINDOWS\System32\DRIVERS\update.sys [MANUAL] Update
Service C:\WINDOWS\System32\svchost.exe [AUTO] uploadmgr
Service C:\WINDOWS\System32\svchost.exe [MANUAL] upnphost
Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS
Service C:\WINDOWS\System32\DRIVERS\usbhub.sys [MANUAL] usbhub
Service C:\WINDOWS\System32\DRIVERS\usbprint.sys [MANUAL] usbprint
Service C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [MANUAL] USBSTOR
Service C:\WINDOWS\System32\DRIVERS\usbuhci.sys [MANUAL] usbuhci
Service C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [AUTO] V124
Service System32\Drivers\vaxscsi.sys [MANUAL] vaxscsi
Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave
Service [DISABLED] ViaIde
Service [BOOT] VolSnap
Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS
Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time
Service W3SVC
Service C:\WINDOWS\System32\DRIVERS\wanarp.sys [MANUAL] Wanarp
Service [MANUAL] WDICA
Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud
Service C:\WINDOWS\System32\svchost.exe [AUTO] WebClient
Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt
Service [MANUAL] Winsock
Service WinSock2
Service WinTrust
Service C:\WINDOWS\System32\svchost.exe [AUTO] WmdmPmSp
Service C:\WINDOWS\System32\svchost.exe [MANUAL] Wmi
Service WmiApRpl
Service C:\WINDOWS\System32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv
Service C:\WINDOWS\System32\drivers\ws2ifsl.sys [MANUAL] WS2IFSL
Service C:\WINDOWS\system32\svchost.exe [AUTO] wuauserv
Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC
Service {FF3DBB0A-3BBD-4578-ABBE-40681F082058}
Service [MANUAL] ak6tc3mn
---- EOF - GMER 1.0.12 ----
GMER 1.0.12.12011 - http://www.gmer.net
Rootkit scan 2007-02-10 17:43:08
Windows 5.1.2600
---- System - GMER 1.0.12 ----
SSDT sptd.sys ZwCreateKey
SSDT sptd.sys ZwEnumerateKey
SSDT sptd.sys ZwEnumerateValueKey
SSDT sptd.sys ZwOpenKey
SSDT sptd.sys ZwQueryKey
SSDT sptd.sys ZwQueryValueKey
SSDT sptd.sys ZwSetValueKey
---- Kernel code sections - GMER 1.0.12 ----
.text ntoskrnl.exe!KeInitializeInterrupt + B79 804D4F8E 1 Byte [ 06 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 1B0 804FC6C8 4 Bytes [ B0, B0, 93, F9 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 228 804FC740 4 Bytes [ 4E, 08, 94, F9 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 230 804FC748 4 Bytes [ EE, 0B, 94, F9 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 2E8 804FC800 4 Bytes [ 90, B0, 93, F9 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 38C 804FC8A4 4 Bytes [ C6, 0C, 94, F9 ]
.text ...
.text USBPORT.SYS!DllUnload F926ADBC 5 Bytes JMP 8156F960
---- User code sections - GMER 1.0.12 ----
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!SetScrollInfo 77D3466C 7 Bytes JMP 015DAAA2 C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!SetScrollRange 77D393E8 6 Bytes JMP 015DAAF8 C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!ShowScrollBar 77D4BE13 5 Bytes JMP 015DAB26 C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!GetScrollInfo 77D4C6AE 7 Bytes JMP 015DAA2A C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!GetScrollRange 77D4D6DF 6 Bytes JMP 015DAA77 C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!SetScrollPos 77D4D729 6 Bytes JMP 015DAACD C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!GetScrollPos 77D4D759 9 Bytes JMP 015DAA52 C:\Program Files\Winamp\Plugins\gen_jumpex.dll
.text C:\Program Files\Winamp\winamp.exe[1464] USER32.dll!EnableScrollBar 77D56C25 7 Bytes JMP 015DAA02 C:\Program Files\Winamp\Plugins\gen_jumpex.dll
---- Devices - GMER 1.0.12 ----
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 817DF1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 817DF1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLOSE 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_WRITE 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_INFORMATION 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_INFORMATION 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_EA 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FLUSH_BUFFERS 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_VOLUME_INFORMATION 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_VOLUME_INFORMATION 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DIRECTORY_CONTROL 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FILE_SYSTEM_CONTROL 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DEVICE_CONTROL 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SHUTDOWN 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_LOCK_CONTROL 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLEANUP 8134A1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_PNP 8134A1D8
Device \Driver\00000063 \Device\00000044 IRP_MJ_POWER [F9949C7E] sptd.sys
Device \Driver\00000063 \Device\00000044 IRP_MJ_SYSTEM_CONTROL [F99632A2] sptd.sys
Device \Driver\00000063 \Device\00000044 IRP_MJ_PNP [F9964228] sptd.sys
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 8156E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 817701D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 817701D8
Device \Driver\00000063 \Device\00000045 IRP_MJ_POWER [F9949C7E] sptd.sys
Device \Driver\00000063 \Device\00000045 IRP_MJ_SYSTEM_CONTROL [F99632A2] sptd.sys
Device \Driver\00000063 \Device\00000045 IRP_MJ_PNP [F9964228] sptd.sys
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 8156E1D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 8156E1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 817E11D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 81572980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 81572980
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 817E11D8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 81572980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 81572980
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CREATE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_READ 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_WRITE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_FLUSH_BUFFERS 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_INTERNAL_DEVICE_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SHUTDOWN 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CLEANUP 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_POWER 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SYSTEM_CONTROL 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_PNP 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_CREATE 817E11D8
Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_READ
