log do przeczyszczenia-strasznie mulący komputer zwiechy

**Posty:** 685 · przez **Michał22** 10 Cze 2007, 19:21

Witam
proszę o sprawdzenia loga:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 18:52:09, on 2007-06-10 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\MsPMSPSv.exe C:\WINDOWS\system32\wscntfy.exe D:\programy\Office12\WINWORD.EXE D:\programy\Konnekt\konnekt.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Opera\Opera.exe C:\Documents and Settings\aa\Pulpit\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\programy\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Gadu-Gadu] "D:\programy\Gadu-Gadu\gg.exe" /tray O8 - Extra context menu item: Dodaj do blokowanych banerów - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm O8 - Extra context menu item: E&ksportuj do programu Microsoft Excel - res://D:\programy\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Statystyki ochrony WWW - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll O9 - Extra button: Wyślij do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\programy\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Wyślij &do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\programy\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\programy\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\programy\Office12\GR99D3~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - AppInit_DLLs: ,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing) O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\hpzipm12.exe

komputer strasznie muli mam dziwne procesu np. taki jak guard.exe- włączam menadżer procesów i patrze a tam użycie pamięci koło 600 000K!! na tym procesie po czym spada zaraz... mam zwiechy. chciałem dać jeszcze loga z silent runners ale wyskakuje błąd...o to on: http://patrz.pl?197240

pozdrawiam,
Michał

**Posty:** 18165 · przez **wojtas** 10 Cze 2007, 20:58

daj loga z:

http://download.bleepingcomputer.com/sUBs/ComboFix.exe

**Posty:** 685 · przez **Michał22** 10 Cze 2007, 21:12

nie wiem czy to tak powinno wyglądać ale daje:

Kod: Zaznacz wszystko: ComboFix 07-06-09.5 - C:\Documents and Settings\aa\Pulpit\ComboFix.exe "aa" - 2007-06-10 20:45:07 - Dodatek Service Pack 2 NTFS ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) C:\WINDOWS\system\smss.exe ((((((((((((((((((((((((( Files Created from 2007-05-10 to 2007-06-10 ))))))))))))))))))))))))))))))) 2007-06-10 20:44 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-06-09 21:07 <DIR> d-------- C:\Program Files\TVAnts 2007-06-06 22:08 9,464 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys 2007-06-06 22:08 9,336 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2007-06-06 22:08 43,528 --------- C:\WINDOWS\system32\drivers\PxHelp20.sys 2007-06-06 22:08 129,784 --------- C:\WINDOWS\system32\pxafs.dll 2007-06-06 22:08 <DIR> d-------- C:\Program Files\Winamp 2007-06-06 22:07 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Windows Genuine Advantage 2007-06-05 21:43 <DIR> d-------- C:\Program Files\Windows Media Connect 2 2007-06-05 21:40 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2007-06-05 21:40 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF 2007-06-05 21:15 <DIR> d-------- C:\Temp 2007-06-05 21:15 <DIR> d-------- C:\Program Files\ImTOO 2007-06-05 21:14 <DIR> d-------- C:\Program Files\Common Files\Download Manager 2007-06-04 21:32 9,087,264 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2007-06-04 21:32 82,258 --a------ C:\WINDOWS\system32\drivers\klin.dat 2007-06-04 21:32 82,258 --a------ C:\WINDOWS\system32\drivers\klick.dat 2007-06-04 21:32 46,112 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2007-06-04 21:32 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Kaspersky Lab 2007-06-04 21:25 <DIR> d-------- C:\KAV 2007-06-04 20:50 <DIR> d-------- C:\Program Files\Kaspersky Lab 2007-06-04 20:49 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS 2007-06-04 15:35 245,760 --a------ C:\Program Files\Uninstall Ask Toolbar.dll 2007-06-03 14:34 <DIR> d-------- C:\Program Files\hp deskjet 930c series 2007-05-23 16:55 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Nero 2007-05-23 16:13 <DIR> d-------- C:\Program Files\AskTBar 2007-05-23 06:50 <DIR> d-------- C:\Program Files\MGrenda 2007-05-22 22:10 21,504 --a------ C:\WINDOWS\system32\hidserv.dll 2007-05-22 22:10 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys 2007-05-21 11:10 7,552 --a------ C:\WINDOWS\system32\drivers\SONYPVU1.SYS 2007-05-19 12:35 <DIR> d-------- C:\vuescan 2007-05-17 20:38 237,568 --a------ C:\WINDOWS\system32\OggDS.dll 2007-05-17 20:37 921,600 --a------ C:\WINDOWS\system32\vorbisenc.dll 2007-05-17 20:37 9,216 --a------ C:\WINDOWS\system32\cpuinf32.dll 2007-05-17 20:37 45,056 --a------ C:\WINDOWS\system32\ogg.dll 2007-05-17 20:37 245,760 --a------ C:\WINDOWS\system32\mplvpx.dll 2007-05-17 20:37 188,416 --a------ C:\WINDOWS\system32\vorbis.dll 2007-05-13 10:04 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys 2007-05-13 10:02 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DANEAP~1\Spybot - Search & Destroy 2007-05-11 22:17 <DIR> d-------- C:\DOCUME~1\aa\DANEAP~1\VSO_HWE 2007-05-11 21:07 <DIR> d-------- C:\Program Files\vso 2007-05-11 21:07 <DIR> d-------- C:\DOCUME~1\aa\DANEAP~1\Vso (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-06-10 16:59:09 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\Skype 2007-06-09 19:05:03 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\ppStream 2007-06-04 13:35:46 -------- d-----w C:\Program Files\AudioConvert 2007-06-03 12:28:51 -------- d-----w C:\Program Files\Hewlett-Packard 2007-05-23 14:59:00 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\Ahead 2007-05-23 14:56:43 -------- d-----w C:\Program Files\Common Files\Ahead 2007-05-23 14:07:08 -------- d-----w C:\Program Files\Ahead 2007-05-17 18:37:32 1,415,680 ----a-w C:\WINDOWS\system32\WMV9VCM.dll 2007-05-17 18:36:45 639,066 ----a-w C:\WINDOWS\system32\DivX.dll 2007-05-17 18:36:41 765,952 ----a-w C:\WINDOWS\system32\xvidcore.dll 2007-05-12 07:32:34 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\uTorrent 2007-05-09 14:15:09 -------- d-----w C:\Program Files\ABBYY FineReader 8.0 Professional Edition 2007-05-07 12:09:10 50,748 ----a-w C:\WINDOWS\system32\perfc015.dat 2007-05-07 12:09:10 358,834 ----a-w C:\WINDOWS\system32\perfh015.dat 2007-05-05 18:22:32 -------- d-----w C:\Program Files\Microsoft Works 2007-05-05 18:22:17 -------- d-----w C:\Program Files\MSBuild 2007-05-05 18:13:06 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\SopCast 2007-04-29 16:03:32 -------- d-----w C:\Program Files\Common Files\InstallShield 2007-04-29 09:32:16 -------- d--h--w C:\Program Files\InstallShield Installation Information 2007-04-29 09:28:27 -------- d-----w C:\Program Files\Cerience 2007-04-29 09:27:06 -------- d-----w C:\Program Files\EA GAMES 2007-04-29 09:18:44 -------- d-----w C:\Program Files\Audio Converter 2007-04-29 09:17:29 -------- d-----w C:\Program Files\GameShadow 2007-04-28 13:27:32 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\NeroDCTemplates 2007-04-27 19:49:55 551 ----a-w C:\WINDOWS\eReg.dat 2007-04-27 19:49:46 -------- d-----w C:\Program Files\AceGain 2007-04-27 19:49:42 729,088 ----a-w C:\WINDOWS\iun6002.exe 2007-04-22 13:10:52 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\EPSON 2007-04-22 13:10:22 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\ABBYY 2007-04-20 15:42:12 98,304 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-04-18 13:53:55 -------- d-----w C:\DOCUME~1\aa\DANEAP~1\Gadu-Gadu 2007-04-17 01:05:01 -------- d-----w C:\Program Files\Messenger 2007-04-16 20:44:05 -------- d-----w C:\Program Files\IVT Corporation 2007-04-16 20:42:48 1,386,496 ----a-w C:\WINDOWS\system32\Msvbvm60.dll 2007-04-15 07:19:16 -------- d-----w C:\Program Files\Opera 2007-04-12 21:06:13 245,760 ------w C:\WINDOWS\Setup1.exe 2007-04-12 21:06:11 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE 2007-04-10 12:37:53 -------- d-----w C:\Program Files\Skype 2007-04-10 12:37:53 -------- d-----w C:\Program Files\Common Files\Skype 2007-04-10 12:31:50 -------- d-----w C:\Program Files\Alcohol Soft 2007-04-07 11:51:53 100 ----a-w C:\AUTOEXEC.BAT 2007-04-02 07:34:12 13,438 ----a-w C:\WINDOWS\hpbins01.dat 2007-03-31 14:24:26 0 --sha-r C:\MSDOS.SYS 2007-03-31 14:24:26 0 --sha-r C:\IO.SYS 2007-03-31 14:24:26 0 ----a-w C:\CONFIG.SYS 2007-03-31 14:21:40 21,856 ----a-w C:\WINDOWS\system32\emptyregdb.dat 2007-03-17 13:45:36 293,376 ----a-w C:\WINDOWS\system32\winsrv.dll ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects] {53707962-6F74-2D53-2644-206D7942484F}=C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 01:04] {72853161-30C5-4D22-B7F9-0BBC1D38A37E}=D:\programy\Office12\GRA8E1~1.DLL [2006-10-27 00:48] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll [2006-12-15 03:23] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2006-10-07 14:20] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2007-05-15 00:22] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:44] "Gadu-Gadu"="D:\programy\Gadu-Gadu\gg.exe" [2007-04-17 23:41] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="D:\programy\Office12\GRA8E1~1.DLL" [2006-10-27 00:48] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2006-09-28 16:13] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"= ,C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] bthsvcs BthServ HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs* ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-06-10 20:46:32 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\BTHPORT\Parameters\Services\{00001000-0000-1000-8000-00805f9b34fb}] [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\BTHPORT\Parameters\Services\{00001115-0000-1000-8000-00805f9b34fb}] Completion time: 2007-06-10 20:47:20 C:\ComboFix-quarantined-files.txt ... 2007-06-10 20:47 --- E O F ---

**Posty:** 18165 · przez **wojtas** 10 Cze 2007, 21:17

log masz ok byl jeden smiec ale zostal usuniety

**Posty:** 685 · przez **Michał22** 10 Cze 2007, 21:22

to co jest winą mulenia? robiłem czyszczenie loga regsupreme mam wyłączone przy starcie programy i robiłem defragmentacje....

**Posty:** 18165 · przez **wojtas** 10 Cze 2007, 21:29

Użyj WWDC :
http://www.firewallleaktester.com/wwdc.htm
Zmień opcje z disable na enable. Uruchom ponownie komputer.
Tak powinny wyglądać porty (NetBIOS może być żółty) :
http://www.firewallleaktester.com/images_site/wwdc.jpg

sciagnij gmera:

http://gmer.net/gmer.zip

1. Zakładka Rootkit >>> zaznaczone wszystko oprócz Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta
2. Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

**Posty:** 685 · przez **Michał22** 10 Cze 2007, 22:05

Kod: Zaznacz wszystko: GMER 1.0.12.12244 - http://www.gmer.net Rootkit scan 2007-06-10 21:43:47 Windows 5.1.2600 Dodatek Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwClose SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateProcessEx SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSection SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateSymbolicLinkObject SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwCreateThread SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDeleteValueKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwDuplicateObject SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwEnumerateValueKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwFlushKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwInitializeRegistry SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwLoadKey2 SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwNotifyChangeKey SSDT kl1.sys ZwOpenFile SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenKey SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwOpenProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwOpenSection SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryMultipleValueKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQuerySystemInformation SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwQueryValueKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwReplaceKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwRestoreKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwResumeThread SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSaveKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetContextThread SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationFile SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetInformationProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetSecurityObject SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSetValueKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwSuspendThread SSDT \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwTerminateProcess SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwUnloadKey SSDT \??\C:\WINDOWS\system32\drivers\klif.sys ZwWriteVirtualMemory SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[284] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[285] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[286] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[287] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[288] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[289] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[290] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[291] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[292] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[293] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[294] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[295] SSDT \??\C:\WINDOWS\system32\drivers\klif.sys SSDT[296] Code \??\C:\WINDOWS\system32\drivers\klif.sys FsRtlCheckLockForReadAccess Code \??\C:\WINDOWS\system32\drivers\klif.sys IoIsOperationSynchronous ---- Kernel code sections - GMER 1.0.12 ---- .text ntoskrnl.exe!KiDispatchInterrupt + BA 804DB92E 7 Bytes JMP F49473C0 \??\C:\WINDOWS\system32\drivers\klif.sys .text ntoskrnl.exe!IoIsOperationSynchronous 804E8752 5 Bytes JMP F4944400 \??\C:\WINDOWS\system32\drivers\klif.sys .text ntoskrnl.exe!FsRtlCheckLockForReadAccess 80503C29 5 Bytes JMP F4943F00 \??\C:\WINDOWS\system32\drivers\klif.sys ? C:\WINDOWS\system32\drivers\sptd.sys Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. .text USBPORT.SYS!DllUnload F709462C 5 Bytes JMP 866731B8 ? System32\Drivers\ayszejb9.SYS Nie można odnaleźć określonego pliku. ? C:\WINDOWS\system32\DRIVERS\update.sys ---- User code sections - GMER 1.0.12 ---- .text C:\WINDOWS\explorer.exe[1964] SHELL32.dll!StrStrW + FFE2DAB6 7C9C8998 4 Bytes [ B0, 02, 35, 7E ] ---- Devices - GMER 1.0.12 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 867601D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 867601D8 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CREATE 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CLOSE 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_READ 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_WRITE 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_QUERY_INFORMATION 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_SET_INFORMATION 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_QUERY_VOLUME_INFORMATION 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_DIRECTORY_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_FILE_SYSTEM_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_DEVICE_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_LOCK_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CLEANUP 85C0C980 Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_PNP 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CREATE 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CLOSE 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_READ 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_WRITE 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_QUERY_INFORMATION 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_SET_INFORMATION 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_QUERY_VOLUME_INFORMATION 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_DIRECTORY_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_FILE_SYSTEM_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_DEVICE_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_LOCK_CONTROL 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CLEANUP 85C0C980 Device \FileSystem\Udfs \UdfsDisk IRP_MJ_PNP 85C0C980 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP 866E31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 867D31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_PNP 866E31D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} IRP_MJ_CREATE 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} IRP_MJ_CLOSE 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} IRP_MJ_DEVICE_CONTROL 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} IRP_MJ_INTERNAL_DEVICE_CONTROL 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} IRP_MJ_CLEANUP 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} IRP_MJ_PNP 859F6980 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CREATE 862DD1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_CLOSE 862DD1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_DEVICE_CONTROL 862DD1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 862DD1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_POWER 862DD1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_SYSTEM_CONTROL 862DD1D8 Device \Driver\usbehci \Device\USBPDO-4 IRP_MJ_PNP 862DD1D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 867631D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 8663F980 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 867631D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 867631D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 8663F980 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CLOSE 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_POWER 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SYSTEM_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_PNP 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_CREATE 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_CLOSE 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_POWER 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_SYSTEM_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-3 IRP_MJ_PNP 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CREATE 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CLOSE 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_INTERNAL_DEVICE_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_POWER 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SYSTEM_CONTROL 867621D8 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_PNP 867621D8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSE 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_READ 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 8663F980 Device \Driver\NetBT \Device\NetBT_Tcpip_{CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} IRP_MJ_CREATE 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} IRP_MJ_CLOSE 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} IRP_MJ_DEVICE_CONTROL 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} IRP_MJ_INTERNAL_DEVICE_CONTROL 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} IRP_MJ_CLEANUP 859F6980 Device \Driver\NetBT \Device\NetBT_Tcpip_{CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} IRP_MJ_PNP 859F6980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSE 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_READ 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 8663F980 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 8663F980 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 859F6980 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 859F6980 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 859F6980 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 859F6980 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 859F6980 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 859F6980 Device \Driver\00000042 \Device\0000005c IRP_MJ_POWER [F7745C7E] sptd.sys Device \Driver\00000042 \Device\0000005c IRP_MJ_SYSTEM_CONTROL [F775F2A2] sptd.sys Device \Driver\00000042 \Device\0000005c IRP_MJ_PNP [F7760228] sptd.sys Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP 866E31D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 85C031D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_PNP 866E31D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 85C031D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 85C031D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CREATE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_CLOSE 866E31D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_POWER 866E31D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_SYSTEM_CONTROL 866E31D8 Device \Driver\usbuhci \Device\USBFDO-3 IRP_MJ_PNP 866E31D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CREATE 862DD1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_CLOSE 862DD1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_DEVICE_CONTROL 862DD1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 862DD1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_POWER 862DD1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_SYSTEM_CONTROL 862DD1D8 Device \Driver\usbehci \Device\USBFDO-4 IRP_MJ_PNP 862DD1D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 867631D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 867631D8 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_CREATE 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_CLOSE 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_POWER 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target1Lun0 IRP_MJ_PNP 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_CREATE 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_CLOSE 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_POWER 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91Port4Path0Target0Lun0 IRP_MJ_PNP 86285980 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_CREATE 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_CLOSE 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_DEVICE_CONTROL 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_INTERNAL_DEVICE_CONTROL 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_POWER 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_SYSTEM_CONTROL 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1 IRP_MJ_PNP 867611D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_CREATE 867D21D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_CLOSE 867D21D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_POWER 867D21D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\SI3112r \Device\Scsi\SI3112r1 IRP_MJ_PNP 867D21D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_CREATE 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_CLOSE 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_DEVICE_CONTROL 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_POWER 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_SYSTEM_CONTROL 867611D8 Device \Driver\iteraid \Device\Scsi\iteraid1Port3Path0Target3Lun0 IRP_MJ_PNP 867611D8 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_CREATE 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_CLOSE 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_DEVICE_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_INTERNAL_DEVICE_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_POWER 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_SYSTEM_CONTROL 86285980 Device \Driver\ayszejb9 \Device\Scsi\ayszejb91 IRP_MJ_PNP 86285980 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 85A02530 Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 85A02530 ---- Threads - GMER 1.0.12 ---- Thread 4:168 86319D00 Thread 4:172 86319D00 Thread 4:176 862F0430 Thread 4:180 862F0430 Thread 4:184 862F0430 Thread 4:500 86319D00 Thread 4:644 86319D00 Thread 4:712 86319D00 ---- EOF - GMER 1.0.12 ----

[code]GMER 1.0.12.12244 - http://www.gmer.net
Rootkit scan 2007-06-10 21:54:53
Windows 5.1.2600 Dodatek Service Pack 2

---- Services - GMER 1.0.12 ----

Service [DISABLED] Abiosdsk
Service [DISABLED] abp480n5
Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI
Service [DISABLED] ACPIEC
Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [MANUAL] Adobe LM Service
Service [DISABLED] adpu160m
Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec
Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD
Service C:\WINDOWS\system32\DRIVERS\agp440.sys [BOOT] agp440
Service [DISABLED] Aha154x
Service [DISABLED] aic78u2
Service [DISABLED] aic78xx
Service C:\WINDOWS\system32\drivers\ALCXSENS.SYS [MANUAL] ALCXSENS
Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM
Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter
Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG
Service [DISABLED] AliIde
Service C:\WINDOWS\system32\DRIVERS\Amps2prt.sys [MANUAL] Amps2prt
Service [DISABLED] amsint
Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt
Service C:\WINDOWS\system32\DRIVERS\arp1394.sys [MANUAL] Arp1394
Service [DISABLED] asc
Service [DI

**Posty:** 18165 · przez **wojtas** 10 Cze 2007, 22:12

wklej jeszcze caly 2 log

**Posty:** 685 · przez **Michał22** 10 Cze 2007, 22:18

Kod: Zaznacz wszystko: GMER 1.0.12.12244 - http://www.gmer.net Rootkit scan 2007-06-10 21:54:53 Windows 5.1.2600 Dodatek Service Pack 2 ---- Services - GMER 1.0.12 ---- Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI Service [DISABLED] ACPIEC Service C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [MANUAL] Adobe LM Service Service [DISABLED] adpu160m Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD Service C:\WINDOWS\system32\DRIVERS\agp440.sys [BOOT] agp440 Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service C:\WINDOWS\system32\drivers\ALCXSENS.SYS [MANUAL] ALCXSENS Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service C:\WINDOWS\system32\DRIVERS\Amps2prt.sys [MANUAL] Amps2prt Service [DISABLED] amsint Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service C:\WINDOWS\system32\DRIVERS\arp1394.sys [MANUAL] Arp1394 Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service C:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service C:\WINDOWS\system32\DRIVERS\atapi.sys [BOOT] atapi Service [DISABLED] Atdisk Service C:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service C:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub Service C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys [SYSTEM] AVG Anti-Spyware Driver Service C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe [AUTO] AVG Anti-Spyware Guard Service C:\WINDOWS\System32\DRIVERS\AvgAsCln.sys [SYSTEM] AvgAsCln Service C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe [AUTO] AVP Service BattC Service [SYSTEM] Beep Service C:\WINDOWS\system32\svchost.exe [MANUAL] BITS Service C:\WINDOWS\system32\DRIVERS\blueletaudio.sys [MANUAL] BlueletAudio Service C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe [AUTO] BlueSoleil Hid Service Service C:\WINDOWS\system32\svchost.exe [AUTO] Browser Service C:\WINDOWS\system32\DRIVERS\btnetdrv.sys [MANUAL] BT Service C:\WINDOWS\System32\Drivers\btcusb.sys [MANUAL] Btcsrusb Service C:\WINDOWS\system32\DRIVERS\BthEnum.sys [MANUAL] BthEnum Service C:\WINDOWS\system32\DRIVERS\vbtenum.sys [MANUAL] BTHidEnum Service C:\WINDOWS\System32\Drivers\BTHidMgr.sys [BOOT] BTHidMgr Service C:\WINDOWS\system32\DRIVERS\bthpan.sys [MANUAL] BthPan Service C:\WINDOWS\System32\Drivers\BTHport.sys [MANUAL] BTHPORT Service C:\WINDOWS\system32\svchost.exe [AUTO] BthServ Service C:\WINDOWS\System32\Drivers\BTHUSB.sys [MANUAL] BTHUSB Service C:\WINDOWS\system32\drivers\BTNetFilter.sys [MANUAL] BTNetFilter Service C:\WINDOWS\system32\drivers\TBPANEL.SYS [MANUAL] Cardex Service [DISABLED] cbidf2k Service C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [MANUAL] CCDECODE Service [DISABLED] cd20xrnt Service [SYSTEM] Cdaudio Service [DISABLED] Cdfs Service C:\WINDOWS\system32\DRIVERS\cdrom.sys [SYSTEM] Cdrom Service [SYSTEM] Changer Service C:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc Service C:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service [DISABLED] CmdIde Service C:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service C:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch Service C:\WINDOWS\system32\svchost.exe [AUTO] Dhcp Service C:\WINDOWS\system32\DRIVERS\disk.sys [BOOT] Disk Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service C:\WINDOWS\System32\drivers\dmio.sys [BOOT] dmio Service C:\WINDOWS\System32\drivers\dmload.sys [BOOT] dmload Service C:\WINDOWS\System32\svchost.exe [AUTO] dmserver Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service C:\WINDOWS\system32\svchost.exe [AUTO] Dnscache Service C:\WINDOWS\system32\DRIVERS\Dot4.sys [MANUAL] dot4 Service C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys [MANUAL] Dot4Print Service C:\WINDOWS\system32\DRIVERS\dot4usb.sys [MANUAL] dot4usb Service [DISABLED] dpti2o Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service C:\WINDOWS\system32\DRIVERS\e1000325.sys [MANUAL] E1000 Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog Service C:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem Service [DISABLED] Fastfat Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service C:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc Service [SYSTEM] Fips Service C:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service C:\WINDOWS\system32\DRIVERS\fltMgr.sys [BOOT] FltMgr Service [SYSTEM] Fs_Rec Service C:\WINDOWS\system32\DRIVERS\ftdisk.sys [BOOT] Ftdisk Service C:\WINDOWS\system32\DRIVERS\gameenum.sys [MANUAL] gameenum Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer Service C:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service C:\WINDOWS\System32\svchost.exe [AUTO] HidServ Service C:\WINDOWS\system32\DRIVERS\hidusb.sys [MANUAL] HidUsb Service [DISABLED] hpn Service C:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP Service C:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter Service [SYSTEM] i2omgmt Service [DISABLED] i2omp Service C:\WINDOWS\system32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt Service ILADFtmi Service C:\WINDOWS\system32\DRIVERS\imapi.sys [SYSTEM] Imapi Service C:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service C:\WINDOWS\system32\DRIVERS\intelide.sys [BOOT] IntelIde Service C:\WINDOWS\system32\DRIVERS\intelppm.sys [SYSTEM] intelppm Service C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw Service C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service C:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service C:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat Service C:\WINDOWS\system32\DRIVERS\ipsec.sys [SYSTEM] IPSec Service C:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM Service ISAPISearch Service C:\WINDOWS\system32\DRIVERS\isapnp.sys [BOOT] isapnp Service C:\WINDOWS\system32\DRIVERS\iteraid.sys [BOOT] iteraid Service C:\WINDOWS\system32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass Service C:\WINDOWS\system32\DRIVERS\kbdhid.sys [SYSTEM] kbdhid Service C:\WINDOWS\system32\drivers\kl1.sys [BOOT] kl1 Service C:\WINDOWS\system32\drivers\klif.sys [SYSTEM] klif Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [BOOT] KSecDD Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation Service [SYSTEM] lbrtfdc Service ldap Service LicenseService Service C:\Program Files\Common Files\LightScribe\LSSrvc.exe [AUTO] LightScribeService Service C:\WINDOWS\system32\svchost.exe [AUTO] LmHosts Service C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [AUTO] MDM Service C:\WINDOWS\system32\svchost.exe [DISABLED] Messenger Service D:\programy\Office12\GrooveAuditService.exe [MANUAL] Microsoft Office Groove Audit Service Service [SYSTEM] mnmdd Service C:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service C:\WINDOWS\system32\DRIVERS\mouclass.sys [SYSTEM] Mouclass Service C:\WINDOWS\system32\DRIVERS\mouhid.sys [MANUAL] mouhid Service [BOOT] MountMgr Service [DISABLED] mraid35x Service C:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb Service C:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC Service [SYSTEM] Msfs Service C:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service C:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios Service C:\WINDOWS\system32\drivers\MSTEE.sys [MANUAL] MSTEE Service [BOOT] Mup Service C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [MANUAL] NABTSFEC Service C:\WINDOWS\system32\Drivers\iqvw32.sys [MANUAL] NAL Service C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [MANUAL] NBService Service [BOOT] NDIS Service C:\WINDOWS\system32\DRIVERS\NdisIP.sys [MANUAL] NdisIP Service C:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service C:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service C:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service C:\WINDOWS\system32\DRIVERS\netbios.sys [SYSTEM] NetBIOS Service C:\WINDOWS\system32\DRIVERS\netbt.sys [MANUAL] NetBT Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm Service C:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service C:\Program Files\Intel\NCS\Sync\NetSvc.exe [MANUAL] NetSvc Service C:\WINDOWS\system32\DRIVERS\nic1394.sys [MANUAL] NIC1394 Service C:\WINDOWS\system32\svchost.exe [MANUAL] Nla Service C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [DISABLED] NMIndexingService Service C:\WINDOWS\system32\drivers\nmwcdc.sys [MANUAL] Nokia USB Generic Service C:\WINDOWS\system32\drivers\nmwcdcm.sys [MANUAL] Nokia USB Modem Service C:\WINDOWS\system32\drivers\nmwcd.sys [MANUAL] Nokia USB Phone Parent Service [SYSTEM] Npfs Service [DISABLED] Ntfs Service C:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [SYSTEM] Null Service C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [MANUAL] nv Service C:\WINDOWS\system32\nvsvc32.exe [AUTO] NVSvc Service C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [MANUAL] odserv Service C:\WINDOWS\system32\DRIVERS\ohci1394.sys [BOOT] ohci1394 Service C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [MANUAL] ose Service Outlook Service C:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport Service [BOOT] PartMgr Service [AUTO] ParVdm Service C:\WINDOWS\system32\DRIVERS\pci.sys [BOOT] PCI Service [SYSTEM] PCIDump Service C:\WINDOWS\system32\DRIVERS\pciide.sys [BOOT] PCIIde Service [DISABLED] Pcmcia Service System32\Drivers\Pcouffin.sys [MANUAL] Pcouffin Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service C:\WINDOWS\system32\hpzipm12.exe [MANUAL] Pml Driver HPZ12 Service C:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent Service C:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service C:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched Service C:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service C:\WINDOWS\System32\Drivers\PxHelp20.sys [BOOT] PxHelp20 Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service C:\WINDOWS\system32\DRIVERS\rasacd.sys [SYSTEM] RasAcd Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto Service C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasMan Service C:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service C:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti Service C:\WINDOWS\system32\DRIVERS\rdbss.sys [SYSTEM] Rdbss Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD Service RDPDD Service C:\WINDOWS\system32\DRIVERS\rdpdr.sys [MANUAL] rdpdr Service RDPNP Service [MANUAL] RDPWD Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service C:\WINDOWS\system32\DRIVERS\redbook.sys [SYSTEM] redbook Service C:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess Service C:\WINDOWS\system32\svchost.exe [AUTO] RemoteRegistry Service C:\WINDOWS\system32\DRIVERS\rfcomm.sys [MANUAL] RFCOMM Service C:\WINDOWS\System32\Drivers\RootMdm.sys [MANUAL] ROOTMODEM Service C:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service C:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service C:\WINDOWS\system32\DRIVERS\secdrv.sys [AUTO] Secdrv Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS Service C:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum Service C:\WINDOWS\system32\DRIVERS\serial.sys [SYSTEM] Serial Service [SYSTEM] Sfloppy Service C:\WINDOWS\System32\svchost.exe [MANUAL] SharedAccess Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service C:\WINDOWS\system32\DRIVERS\SI3112r.sys [BOOT] SI3112r Service C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys [BOOT] SiFilter Service [DISABLED] Simbad Service C:\WINDOWS\system32\DRIVERS\SLIP.sys [MANUAL] SLIP Service C:\WINDOWS\system32\DRIVERS\SONYPVU1.SYS [MANUAL] SONYPVU1 Service [DISABLED] Sparrow Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service C:\WINDOWS\System32\Drivers\sptd.sys [BOOT] sptd Service C:\WINDOWS\system32\DRIVERS\sr.sys [BOOT] sr Service C:\WINDOWS\system32\svchost.exe [AUTO] srservice Service C:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv Service C:\WINDOWS\system32\svchost.exe [MANUAL] SSDPSRV Service C:\WINDOWS\system32\DRIVERS\serscan.sys [MANUAL] StillCam Service C:\WINDOWS\system32\svchost.exe [AUTO] stisvc Service C:\WINDOWS\system32\DRIVERS\StreamIP.sys [MANUAL] streamip Service C:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service C:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service [AUTO] TBPanel Service C:\WINDOWS\system32\DRIVERS\tcpip.sys [SYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service C:\WINDOWS\system32\DRIVERS\termdd.sys [SYSTEM] TermDD Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes Service D:\programy\eMule\Incoming\Aktywacja Windows Vista PL + Ok?adki Windows Vista Ultimate\Aktywacja Windows Vista PL\TimerStop.sys [MANUAL] TimerStop Service C:\WINDOWS\system32\tlntsvr.exe [DISABLED] TlntSvr Service [DISABLED] TosIde Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service TSDDD Service [DISABLED] Udfs Service [DISABLED] ultra Service C:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update Service C:\WINDOWS\system32\svchost.exe [MANUAL] upnphost Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS Service usb Service C:\WINDOWS\system32\drivers\usbaudio.sys [MANUAL] usbaudio Service C:\WINDOWS\system32\DRIVERS\usbccgp.sys [MANUAL] usbccgp Service C:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci Service C:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub Service C:\WINDOWS\system32\DRIVERS\usbscan.sys [MANUAL] usbscan Service C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [MANUAL] USBSTOR Service C:\WINDOWS\system32\DRIVERS\usbuhci.sys [MANUAL] usbuhci Service C:\WINDOWS\System32\Drivers\usbvideo.sys [MANUAL] usbvideo Service C:\WINDOWS\system32\DRIVERS\VComm.sys [MANUAL] VComm Service C:\WINDOWS\System32\Drivers\VcommMgr.sys [MANUAL] VcommMgr Service C:\WINDOWS\system32\DRIVERS\V0270Dev.sys [MANUAL] VF0270Dev Service C:\WINDOWS\system32\DRIVERS\V0270VFx.sys [MANUAL] VF0270Vfx Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave Service [DISABLED] ViaIde Service [BOOT] VolSnap Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service W3SVC Service C:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service [MANUAL] WDICA Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service C:\WINDOWS\system32\svchost.exe [AUTO] WebClient Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service [MANUAL] Winsock - Google Desktop Search Backup Before First Install Service [MANUAL] Winsock - Google Desktop Search Backup Before Last Install Service WinSock2 Service Winsock2 - Google Desktop Search Backup Before First Install Service Winsock2 - Google Desktop Search Backup Before Last Install Service WinTrust Service C:\WINDOWS\system32\MsPMSPSv.exe [AUTO] WMDM PMSP Service Service C:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service C:\WINDOWS\System32\svchost.exe [MANUAL] Wmi Service WmiApRpl Service C:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service [SYSTEM] WS2IFSL Service C:\WINDOWS\System32\svchost.exe [AUTO] wscsvc Service C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [MANUAL] WSTCODEC Service C:\WINDOWS\system32\svchost.exe [AUTO] wuauserv Service C:\WINDOWS\system32\DRIVERS\WudfPf.sys [MANUAL] WudfPf Service C:\WINDOWS\system32\DRIVERS\wudfrd.sys [MANUAL] WudfRd Service C:\WINDOWS\system32\svchost.exe [MANUAL] WudfSvc Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service C:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov Service {5B866365-48C5-4DE4-B43B-87077F465101} Service {7CAE2EFA-B68F-4A19-9F4F-DD84D0E2446D} Service {C1D8CD77-1161-4C50-B6BE-E0BB53C2285A} Service {C52F7E2D-0CF8-4D1F-B5BD-B638E46F3D9D} Service {CB1AA195-4DCC-40A5-9B98-BEDD7ED470D6} Service {F0447F46-924B-4AA7-AAFC-038CD7A27FED} Service [MANUAL] ayszejb9 ---- EOF - GMER 1.0.12 ----

niemoge tam wkleić więc robi w następnym (nie nabijam sobie specjalnie postów)

**Posty:** 18165 · przez **wojtas** 10 Cze 2007, 22:22

jest ok nie jest to wina smieci musisz szukac przyczyny gdzie indziej

Autor postu otrzymał pochwałę

**Posty:** 685 · przez **Michał22** 10 Cze 2007, 22:41

ok dzięki!!

log do przeczyszczenia-strasznie mulący komputer zwiechy

log do przeczyszczenia-strasznie mulący komputer zwiechy

Kto jest na forum