problem z ie

**Posty:** 3874 · przez **Wojtasgls** 31 Mar 2007, 19:18

Cos mi sie dzieje z ta przegladarka gdy otwieram lub zamykam strone czesto mi wyskakuje blad:

http://img58.imageshack.us/my.php?image=bladha5.png

oraz jak blad ten wykakuje to napisane ze sie zapisuje w jednym pliku. oto podglad tego co tam jest:

Kod: Zaznacz wszystko: <?xml version="1.0" encoding="UTF-16"?> <DATABASE> <EXE NAME="iexplore.exe" FILTER="GRABMI_FILTER_PRIVACY"> <MATCHING_FILE NAME="HMMAPI.DLL" SIZE="38912" CHECKSUM="0xD85D870C" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Microsoft HTTP Mail Simple MAPI" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="HMMAPI.DLL" INTERNAL_NAME="HMMAPI" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1667F" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:15" UPTO_LINK_DATE="08/04/2004 07:56:15" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="iedw.exe" SIZE="18432" CHECKSUM="0xE57BA846" BIN_FILE_VERSION="5.1.2600.2937" BIN_PRODUCT_VERSION="5.1.2600.2937" PRODUCT_VERSION="5.1.2600.2937" FILE_DESCRIPTION="IE Crash Detection" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.2937 (xpsp.060623-0011)" ORIGINAL_FILENAME="iedw.exe" INTERNAL_NAME="iedw.exe" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x563B" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2937" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2937" LINK_DATE="06/23/2006 08:48:30" UPTO_LINK_DATE="06/23/2006 08:48:30" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="IEXPLORE.EXE" SIZE="93184" CHECKSUM="0xE187626E" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Explorer" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="IEXPLORE.EXE" INTERNAL_NAME="iexplore" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x23C72" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 06:00:33" UPTO_LINK_DATE="08/04/2004 06:00:33" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwconn.dll" SIZE="61440" CHECKSUM="0xDD04DAB" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="icwconn.dll" INTERNAL_NAME="icwconn" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x11BD7" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:14" UPTO_LINK_DATE="08/04/2004 07:56:14" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwconn1.exe" SIZE="214528" CHECKSUM="0xC9B5555" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="icwconn1.exe" INTERNAL_NAME="icwconn1" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x3C746" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:19" UPTO_LINK_DATE="08/04/2004 05:59:19" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwconn2.exe" SIZE="86016" CHECKSUM="0x7DE2AFFE" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="ICWCONN2.EXE" INTERNAL_NAME="ICWCONN2" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1DDE9" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:22" UPTO_LINK_DATE="08/04/2004 05:59:22" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwdl.dll" SIZE="32768" CHECKSUM="0xF4CC9266" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Service MIME Mutlipart Download" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="ICWDL.DLL" INTERNAL_NAME="ICWDL" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x174A9" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:16" UPTO_LINK_DATE="08/04/2004 07:56:16" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwhelp.dll" SIZE="172032" CHECKSUM="0xCBAB0AC0" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard Helper functions" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="icwhelp.dll" INTERNAL_NAME="icwhelp" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x33E62" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:17" UPTO_LINK_DATE="08/04/2004 07:56:17" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwres.dll" SIZE="61440" CHECKSUM="0xA488AA92" BIN_FILE_VERSION="6.0.2600.0" BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)" ORIGINAL_FILENAME="icwres.dll" INTERNAL_NAME="icwres" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1AA60" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0" LINK_DATE="08/18/2001 05:35:05" UPTO_LINK_DATE="08/18/2001 05:35:05" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwrmind.exe" SIZE="24576" CHECKSUM="0x70643FDC" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard Reminder" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="ICWRMIND.EXE" INTERNAL_NAME="ICWRMIND" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x13447" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:09" UPTO_LINK_DATE="08/04/2004 05:59:09" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwtutor.exe" SIZE="73728" CHECKSUM="0xF945F7EB" BIN_FILE_VERSION="6.0.2600.0" BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)" ORIGINAL_FILENAME="icwtutor.exe" INTERNAL_NAME="icwtutor" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x16B27" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0" LINK_DATE="08/17/2001 20:49:08" UPTO_LINK_DATE="08/17/2001 20:49:08" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\icwutil.dll" SIZE="49152" CHECKSUM="0xB9156DF5" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="icwutil.dll" INTERNAL_NAME="icwutil" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0xF816" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 07:56:19" UPTO_LINK_DATE="08/04/2004 07:56:19" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\inetwiz.exe" SIZE="20480" CHECKSUM="0x3D8A325B" BIN_FILE_VERSION="6.0.2900.2180" BIN_PRODUCT_VERSION="6.0.2900.2180" PRODUCT_VERSION="6.00.2900.2180" FILE_DESCRIPTION="Internet Connection Wizard" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)" ORIGINAL_FILENAME="INETWIZ.EXE" INTERNAL_NAME="INETWIZ" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0xE297" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2900.2180" UPTO_BIN_PRODUCT_VERSION="6.0.2900.2180" LINK_DATE="08/04/2004 05:59:25" UPTO_LINK_DATE="08/04/2004 05:59:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\isignup.exe" SIZE="16384" CHECKSUM="0xF8AB8D6E" BIN_FILE_VERSION="6.0.2600.0" BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000" FILE_DESCRIPTION="Internet Signup" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)" ORIGINAL_FILENAME="ISIGNUP.EXE" INTERNAL_NAME="ISIGNUP" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x443C" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0" LINK_DATE="08/17/2001 20:48:46" UPTO_LINK_DATE="08/17/2001 20:48:46" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="Connection Wizard\trialoc.dll" SIZE="40960" CHECKSUM="0x68F70073" BIN_FILE_VERSION="6.0.2600.0" BIN_PRODUCT_VERSION="6.0.2600.0" PRODUCT_VERSION="6.00.2600.0000" FILE_DESCRIPTION="Internet Connection Wizard Trial Reminder Helper" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="6.00.2600.0000 (xpclient.010817-1148)" ORIGINAL_FILENAME="trialoc.dll" INTERNAL_NAME="trialoc" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x1" MODULE_TYPE="WIN32" PE_CHECKSUM="0x198FE" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="6.0.2600.0" UPTO_BIN_PRODUCT_VERSION="6.0.2600.0" LINK_DATE="08/18/2001 05:36:03" UPTO_LINK_DATE="08/18/2001 05:36:03" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\nppdf32.dll" SIZE="77824" CHECKSUM="0x21D29EF2" BIN_FILE_VERSION="7.0.5.172" BIN_PRODUCT_VERSION="7.0.5.172" PRODUCT_VERSION="7.0.5.2005092300" FILE_DESCRIPTION="Adobe Acrobat Plug-In Version 7.00 for Netscape" COMPANY_NAME="Adobe Systems Inc." PRODUCT_NAME="Adobe Acrobat" FILE_VERSION="7.0.5.2005092300" ORIGINAL_FILENAME="NPPDF32.DLL" LEGAL_COPYRIGHT="Copyright 1984-2005 Adobe Systems Incorporated and its licensors. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x10001" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x1D654" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="7.0.5.172" UPTO_BIN_PRODUCT_VERSION="7.0.5.172" LINK_DATE="09/24/2005 04:44:16" UPTO_LINK_DATE="09/24/2005 04:44:16" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin2.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin3.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin4.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin5.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin6.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> <MATCHING_FILE NAME="PLUGINS\npqtplugin7.dll" SIZE="98304" CHECKSUM="0x6BEED4F2" BIN_FILE_VERSION="6.4.0.29" BIN_PRODUCT_VERSION="6.4.0.29" PRODUCT_VERSION="QuickTime 6.4" FILE_DESCRIPTION="The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the <A HREF=http://www.apple.com/quicktime/>QuickTime</A> Web site." COMPANY_NAME="Apple Computer, Inc." PRODUCT_NAME="QuickTime Plug-in 6.4" FILE_VERSION="6.4" ORIGINAL_FILENAME="npqtplugin.dll" INTERNAL_NAME="QuickTime Plug-In" LEGAL_COPYRIGHT="© Apple Computer, Inc. 1992-2003" VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x4" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0x0" LINKER_VERSION="0x0" UPTO_BIN_FILE_VERSION="6.4.0.29" UPTO_BIN_PRODUCT_VERSION="6.4.0.29" LINK_DATE="10/03/2003 22:05:25" UPTO_LINK_DATE="10/03/2003 22:05:25" VER_LANGUAGE="English (United States) [0x409]" /> </EXE> <EXE NAME="kernel32.dll" FILTER="GRABMI_FILTER_THISFILEONLY"> <MATCHING_FILE NAME="kernel32.dll" SIZE="985600" CHECKSUM="0xE7E1F9DC" BIN_FILE_VERSION="5.1.2600.2991" BIN_PRODUCT_VERSION="5.1.2600.2991" PRODUCT_VERSION="5.1.2600.2991" FILE_DESCRIPTION="Windows NT BASE API Client DLL" COMPANY_NAME="Microsoft Corporation" PRODUCT_NAME="Microsoft® Windows® Operating System" FILE_VERSION="5.1.2600.2991 (xpsp.060907-0105)" ORIGINAL_FILENAME="kernel32" INTERNAL_NAME="kernel32" LEGAL_COPYRIGHT="© Microsoft Corporation. All rights reserved." VERFILEDATEHI="0x0" VERFILEDATELO="0x0" VERFILEOS="0x40004" VERFILETYPE="0x2" MODULE_TYPE="WIN32" PE_CHECKSUM="0xF39C9" LINKER_VERSION="0x50001" UPTO_BIN_FILE_VERSION="5.1.2600.2991" UPTO_BIN_PRODUCT_VERSION="5.1.2600.2991" LINK_DATE="09/07/2006 11:59:20" UPTO_LINK_DATE="09/07/2006 11:59:20" VER_LANGUAGE="English (United States) [0x409]" /> </EXE> </DATABASE>

oraz wklejam loga:

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 19:09:11, on 2007-03-31 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe C:\WINDOWS\system32\MMTray.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\autoclk.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Winamp\winampa.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\ACE Mega CoDecS Pack\Media Player Classic\mplayerc.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\system32\ntvdm.exe C:\Documents and Settings\Wojtas\Desktop\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada Plus wita Cie w Internecie R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\system32\NVRTCLK\NVRTClk.exe O4 - HKLM\..\Run: [PathNvidiaTV] C:\Program Files\Gigabyte\Nvidia\patchnvidiaTVout.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [MMTray] MMTray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [autoclk] autoclk.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E7FAC2A2-7766-41FF-B349-60DDCDEAC170}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 00:28

wrzuc loga z comboscana:

http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

**Posty:** 3874 · przez **Wojtasgls** 01 Kwi 2007, 00:35

Kod: Zaznacz wszystko: ComboScan v20070306.20 run by Wojtas on 2007-04-01 at 00:24:48 Supplementary logfile - please post this as an attachment with your post. -------------------------------------------------------------------------------- -- System Information ---------------------------------------------------------- Microsoft Windows XP Professional (build 2600) SP 2.0 Architecture: X86; Language: English CPU 0: AMD Athlon(tm) 64 Processor 3000+ Percentage of Memory in Use: 32% Physical Memory (total/avail): 1023.48 MiB / 691.8 MiB Pagefile Memory (total/avail): 2460.21 MiB / 2177.89 MiB Virtual Memory (total/avail): 2047.88 MiB / 1995.99 MiB A: is Removable (No Media) C: is Fixed (NTFS) - 14.13 GiB total, 3.45 GiB free. D: is Fixed (FAT32) - 9.76 GiB total, 4.98 GiB free. E: is Fixed (FAT32) - 23.13 GiB total, 2.16 GiB free. F: is Fixed (FAT32) - 27.49 GiB total, 5.53 GiB free. G: is Fixed (NTFS) - 74.52 GiB total, 41.62 GiB free. H: is CDROM (No Media) J: is CDROM (CDFS) -- Security Center ------------------------------------------------------------- AUOptions is disabled. Windows Internal Firewall is disabled. FirstRunDisabled is set. -- Environment Variables ------------------------------------------------------- ALLUSERSPROFILE=C:\Documents and Settings\All Users.WINDOWS APPDATA=C:\Documents and Settings\Wojtas\Application Data CommonProgramFiles=C:\Program Files\Common Files COMPUTERNAME=KOMPUTER ComSpec=C:\WINDOWS\system32\cmd.exe FP_NO_HOST_CHECK=NO HOMEDRIVE=C: HOMEPATH=\Documents and Settings\Wojtas LOGONSERVER=\\KOMPUTER NUMBER_OF_PROCESSORS=1 OS=Windows_NT Path=C:\Program Files\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH PROCESSOR_ARCHITECTURE=x86 PROCESSOR_IDENTIFIER=x86 Family 15 Model 31 Stepping 0, AuthenticAMD PROCESSOR_LEVEL=15 PROCESSOR_REVISION=1f00 ProgramFiles=C:\Program Files PROMPT=$P$G SESSIONNAME=Console SystemDrive=C: SystemRoot=C:\WINDOWS TEMP=C:\DOCUME~1\Wojtas\LOCALS~1\Temp TMP=C:\DOCUME~1\Wojtas\LOCALS~1\Temp USERDOMAIN=KOMPUTER USERNAME=Wojtas USERPROFILE=C:\Documents and Settings\Wojtas windir=C:\WINDOWS __COMPAT_LAYER=EnableNXShowUI -- User Profiles --------------------------------------------------------------- Wojtas [I](admin)[/I] -- Add/Remove Programs --------------------------------------------------------- --> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf ACE Mega CoDecS Pack --> "C:\Program Files\ACE Mega CoDecS Pack\unins000.exe" ACE Mega CoDecs Pack V4.20 --> C:\WINDOWS\system32\rundll32.exe setupapi,InstallHinfSection Remove_DivX 132 C:\WINDOWS\INF\ACEMCP.inf Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Reader 7.0.5 - Polish --> MsiExec.exe /I{AC76BA86-7AD7-1045-7B44-A70500000002} ALLPlayer V2.3.1 --> "C:\Program Files\MarBit\ALLPlayer\unins000.exe" Archiwizator WinRAR --> C:\Program Files\WinRAR\uninstall.exe AutoConnect v0.1.2.5 --> C:\Program Files\AutoConnect\uninst.exe Biathlon Champion 2007 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AE1B733-291D-41A6-8399-EDA07155C12F}\setup.exe" -l0x7 Colin McRae Rally 04 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F8718F95-21A1-44B9-97EC-679C93020BAE}\setup.exe" -l0x15 Deluxe Ski Jump 3 v1.4.0 --> "C:\Program Files\Deluxe Ski Jump 3\Uninstall\unins000.exe" Diablo II --> C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat Diablo II --> C:\WINDOWS\DIIUnin.exe C:\WINDOWS\DIIUnin.dat DivX Player --> C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DVD Solution --> "C:\Program Files\Uninstall_CDS.exe" ewido anti-spyware 4.0 --> C:\Program Files\ewido anti-spyware 4.0\Uninstall.exe Gadu-Gadu 7.6 --> C:\Program Files\Gadu-Gadu\Setup.exe Gothic III Release Update --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1998BD34-1AAB-4169-ACFF-67342E2AF9B4}\setup.exe" -l0x9 -removeonly HijackThis 1.99.1 --> C:\Documents and Settings\Wojtas\Desktop\HijackThis.exe /uninstall IrfanView (remove only) --> C:\Program Files\IrfanView\iv_uninstall.exe J2SE Runtime Environment 5.0 Update 10 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150100} J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110} J2SE Runtime Environment 5.0 Update 9 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150090} Java 2 Runtime Environment Standard Edition v1.3.1_03 --> C:\WINDOWS\IsUninst.exe -f"C:\Program Files\JavaSoft\JRE\1.3.1_03\Uninst.isu" Kazaa Lite K++ v2.4.1 --> "C:\Program Files\Kazaa Lite K++\unins000.exe" Microsoft Office XP Professional z programem FrontPage --> MsiExec.exe /I{90280415-6000-11D3-8CFE-0050048383C9} Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7} Mozilla Firefox (2.0.0.3) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe Multimedia Launcher --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}\setup.exe" -uninstall Neostrada Plus --> C:\PROGRA~1\Wanadoo\Uninstall.exe Nero OEM --> C:\Program Files\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL NVIDIA Drivers --> C:\WINDOWS\system32\nvudisp.exe UninstallGUI PDC World Championship Darts --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{55D6F188-6B54-45E1-8EE5-C80FAB383005}\Setup.exe" -l0x9 PowerDVD --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall PowerProducer --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" -uninstall PRO100 ver. 3.51 --> "C:\Program Files\PRO100\setup\unins000.exe" Real Alternative 1.51 --> "C:\Program Files\Real Alternative\unins000.exe" Realtek AC'97 Audio --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE SAGEM F@st 800-840 --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}\setup.exe" -l0x15 System Requirements Lab --> C:\Program Files\Common Files\SystemRequirementsLab\Uninstall.exe Teenage Mutant Ninja Turtles --> "C:\WINDOWS\Teenage Mutant Ninja Turtles\uninstall.exe" "/U:G:\mutant\Uninstall\uninstall.xml" Winamp (remove only) --> "C:\Program Files\Winamp\UninstWA.exe" Yahoo! Toolbar --> C:\PROGRA~1\Yahoo!\Common\unyt.exe -- End of ComboScan: finished at 2007-04-01 at 00:25:25 ------------------------

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 09:47

wrzuc loga z ComboScan.txt :wink:

**Posty:** 3874 · przez **Wojtasgls** 01 Kwi 2007, 10:26

Kod: Zaznacz wszystko: bComboScan v20070306.20 run by Wojtas on 2007-04-01 at 10:15:32 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as Wojtas.exe) ---------------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 10:15:34, on 2007-04-01 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\MMTray.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe C:\WINDOWS\autoclk.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\AutoConnect\AutoConnect.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Microsoft Office\Office10\WINWORD.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Wojtas\Desktop\comboscan.exe C:\DOCUME~1\Wojtas\Desktop\Wojtas.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://szukaj.wp.pl R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wp.pl/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada Plus wita Cie w Internecie R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [NVRTCLK] C:\WINDOWS\system32\NVRTCLK\NVRTClk.exe O4 - HKLM\..\Run: [PathNvidiaTV] C:\Program Files\Gigabyte\Nvidia\patchnvidiaTVout.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [MMTray] MMTray.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe" O4 - HKLM\..\Run: [autoclk] autoclk.exe O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKCU\..\Run: [AutoConnect] C:\Program Files\AutoConnect\AutoConnect.exe O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {BE833F39-1E0C-468C-BA70-25AAEE55775E} (System Requirements Lab) - http://www.systemrequirementslab.com/sysreqlab.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{E7FAC2A2-7766-41FF-B349-60DDCDEAC170}: NameServer = 194.204.159.1 217.98.63.164 O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- Files created between 2007-03-01 and 2007-04-01 ----------------------------- 2007-03-31 15:49:20 101376 --a------ C:\WINDOWS\system32\drivers\ACEDRV07.sys 2007-03-31 12:49:45 0 d-------- C:\Program Files\Winamp 2007-03-28 15:51:01 0 d-------- C:\Documents and Settings\Wojtas\Application Data\TMNT 2007-03-28 15:46:58 0 d-------- C:\WINDOWS\Teenage Mutant Ninja Turtles<TEENAG~1> 2007-03-25 22:52:14 0 --a------ C:\WINDOWS\nsreg.dat 2007-03-25 22:52:08 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1> 2007-03-25 21:54:47 0 d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Yahoo! Companion<YAHOO!~1> 2007-03-25 21:54:23 0 d-------- C:\Program Files\Yahoo! 2007-03-24 19:01:06 0 d-------- C:\Program Files\PRO100 2007-03-24 00:46:26 0 d-------- C:\Program Files\Common Files\SystemRequirementsLab<SYSTEM~1> 2007-03-11 22:06:50 13786 --a------ C:\WINDOWS\DIIUnin.dat 2007-03-11 22:06:48 2829 --a------ C:\WINDOWS\DIIUnin.pif 2007-03-11 22:06:48 94208 --a------ C:\WINDOWS\DIIUnin.exe 2007-03-11 20:57:01 43520 --a------ C:\WINDOWS\system32\CmdLineExt03.dll<CMDLIN~2.DLL> 2007-03-11 19:54:10 21840 --a-----t C:\WINDOWS\system32\SIntfNT.dll 2007-03-11 19:54:10 17212 --a-----t C:\WINDOWS\system32\SIntf32.dll 2007-03-11 19:54:10 12067 --a-----t C:\WINDOWS\system32\SIntf16.dll 2007-03-11 09:49:27 127456 --a------ C:\WINDOWS\system32\ipdetect.exe 2007-03-11 09:49:27 127497 --a------ C:\WINDOWS\system32\drivers\adiusbaw.sys 2007-03-11 09:49:27 126976 --a------ C:\WINDOWS\system32\coclassfast.dll<COCLAS~1.DLL> 2007-03-11 09:49:27 155648 --a------ C:\WINDOWS\system32\adadix32.dll 2007-03-11 09:49:26 135168 --a------ C:\WINDOWS\system32\unaddrv.exe 2007-03-11 09:49:26 46167 --a------ C:\WINDOWS\system32\drivers\adildr.sys 2007-03-11 09:49:26 4981 --a------ C:\WINDOWS\system32\adadix2k.dll 2007-03-11 09:49:26 46892 --a------ C:\WINDOWS\system32\adadix16.dll 2007-03-11 09:49:24 0 d-------- C:\Program Files\SAGEM 2007-03-11 09:46:19 28672 -ra------ C:\WINDOWS\system32\adinst32.dll 2007-03-11 09:43:17 143360 --a------ C:\WINDOWS\autoclk.exe 2007-03-06 22:42:30 0 d-------- C:\Program Files\Deluxe Ski Jump 3<DELUXE~1> -- Find3M Report --------------------------------------------------------------- 2007-04-01 10:02:02 0 d-------- C:\Program Files\AutoConnect<AUTOCO~1> 2007-03-31 17:52:26 0 d-------- C:\Program Files\Google 2007-03-31 15:47:58 0 d--h----- C:\Program Files\InstallShield Installation Information<INSTAL~1> 2007-03-31 09:22:03 0 d-------- C:\Program Files\ewido anti-spyware 4.0<EWIDOA~1.0> 2007-03-25 22:52:12 0 d-------- C:\Documents and Settings\Wojtas\Application Data\Mozilla 2007-03-11 20:33:38 0 d---s---- C:\Documents and Settings\Wojtas\Application Data\Microsoft<MICROS~1> 2007-03-11 09:51:26 0 d-------- C:\Program Files\Wanadoo 2007-03-10 15:44:12 0 d-------- C:\Documents and Settings\Wojtas\Application Data\Skype 2007-02-21 22:49:45 1669 --a------ C:\Program Files\222.JPG 2007-02-20 22:51:45 17144 --a------ C:\Documents and Settings\Wojtas\Application Data\GDIPFONTCACHEV1.DAT<GDIPFO~1.DAT> 2007-02-17 16:16:47 0 d-------- C:\Program Files\Java 2007-02-14 16:08:15 0 d-------- C:\Program Files\IrfanView<IRFANV~1> 2007-02-13 22:43:31 0 d-------- C:\Program Files\Common Files\Teleca Shared<TELECA~1> 2007-01-30 16:06:51 76948 --a------ C:\Program Files\fotka.JPG 2007-01-28 17:52:41 2597 --a------ C:\Program Files\2614.jpg 2007-01-24 22:34:34 11270 --ahs---- C:\WINDOWS\system32\KGyGaAvL.sys 2007-01-24 22:34:34 56 -r-hs---- C:\WINDOWS\system32\77004CCD45.sys<77004C~1.SYS> -- Registry Dump --------------------------------------------------------------- [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run] "AutoConnect"="C:\\Program Files\\AutoConnect\\AutoConnect.exe" "Gadu-Gadu"="\"C:\\Program Files\\Gadu-Gadu\\gg.exe\" /tray" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run] "NVRTCLK"="C:\\WINDOWS\\system32\\NVRTCLK\\NVRTClk.exe" "PathNvidiaTV"="C:\\Program Files\\Gigabyte\\Nvidia\\patchnvidiaTVout.exe" "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup" "nwiz"="nwiz.exe /install" "SoundMan"="SOUNDMAN.EXE" "MMTray"="MMTray.exe" "SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_11\\bin\\jusched.exe\"" "autoclk"="autoclk.exe" "NvMediaCenter"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI] "Installed"="1" "NoChange"="1" [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS] "Installed"="1" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\autoclk] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="autoclk" "hkey"="HKLM" "command"="autoclk.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ctfmon" "hkey"="HKCU" "command"="C:\\WINDOWS\\system32\\ctfmon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="daemon" "hkey"="HKLM" "command"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM Startup] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="isuspm" "hkey"="HKLM" "command"="C:\\PROGRA~1\\COMMON~1\\INSTAL~1\\UPDATE~1\\isuspm.exe -startup" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSScheduler] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="issch" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\InstallShield\\UpdateService\\issch.exe\" -start" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="msmsgs" "hkey"="HKCU" "command"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NeroCheck" "hkey"="HKLM" "command"="C:\\WINDOWS\\system32\\NeroCheck.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PDVDServ" "hkey"="HKLM" "command"="\"C:\\Program Files\\CyberLink DVD Solution\\PowerDVD\\PDVDServ.exe\"" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="winampa" "hkey"="HKLM" "command"="C:\\Program Files\\Winamp\\winampa.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="TaskbarIcon" "hkey"="HKLM" "command"="C:\\PROGRA~1\\Wanadoo\\TaskbarIcon.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Watch" "hkey"="HKLM" "command"="C:\\PROGRA~1\\Wanadoo\\Watch.exe" "inimapping"="0" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "wuauserv"=dword:00000002 "wscsvc"=dword:00000002 [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="ewido anti-spyware 4.0" [HKEY_USERS\.default\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run] "CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE" [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "DisableRegistryTools"=dword:00000000 [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll" [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost] HTTPFilter REG_MULTI_SZ HTTPFilter\0\0 LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0 NetworkService REG_MULTI_SZ DnsCache\0\0 DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0 rpcss REG_MULTI_SZ RpcSs\0\0 imgsvc REG_MULTI_SZ StiSvc\0\0 termsvcs REG_MULTI_SZ TermService\0\0 -- End of ComboScan: finished at 2007-04-01 at 10:

15:51 ------------------------

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 12:14

C:\WINDOWS\system32\77004CCD45.sys

ten plik przeskanuj tymi skanerami i daj z nich raport:

http://virusscan.jotti.org/
http://www.virustotal.com/en/indexf.html

**Posty:** 3874 · przez **Wojtasgls** 01 Kwi 2007, 15:58

nic nie znaleziono:(

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 16:27

sciagnij gmera

http://gmer.net/gmer.zip

1) Rootkit >>> zaznaczone Pokaż wszystko >>> wskazane tylko Usługi >>> Szukaj >>> Kopiuj >>> CTRL+V do posta
2) Rootkit >>> odznaczone Pokaż wszystko >>> wskazane wszystkie obiekty do skanu >>> Szukaj >>> Kopiuj >>> CTRL+V do posta

**Posty:** 3874 · przez **Wojtasgls** 01 Kwi 2007, 16:42

Kod: Zaznacz wszystko: GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-04-01 16:26:40 Windows 5.1.2600 Service Pack 2 ---- Services - GMER 1.0.12 ---- Service [DISABLED] Abiosdsk Service [DISABLED] abp480n5 Service C:\WINDOWS\system32\drivers\ACEDRV07.sys [AUTO] ACEDRV07 Service C:\WINDOWS\system32\DRIVERS\ACPI.sys [BOOT] ACPI Service [DISABLED] ACPIEC Service C:\WINDOWS\System32\Drivers\adildr.sys [AUTO] ADILOADER Service C:\WINDOWS\system32\DRIVERS\adiusbaw.sys [MANUAL] adiusbaw Service [DISABLED] adpu160m Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec Service C:\WINDOWS\System32\drivers\afd.sys [SYSTEM] AFD Service [DISABLED] Aha154x Service [DISABLED] aic78u2 Service [DISABLED] aic78xx Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM Service C:\WINDOWS\system32\svchost.exe [DISABLED] Alerter Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG Service [DISABLED] AliIde Service [DISABLED] amsint Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt Service C:\WINDOWS\system32\DRIVERS\arp1394.sys [MANUAL] Arp1394 Service [DISABLED] asc Service [DISABLED] asc3350p Service [DISABLED] asc3550 Service C:\WINDOWS\system32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac Service C:\WINDOWS\system32\DRIVERS\atapi.sys [BOOT] atapi Service [DISABLED] Atdisk Service C:\WINDOWS\system32\DRIVERS\atksgt.sys [AUTO] atksgt Service C:\WINDOWS\system32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv Service C:\WINDOWS\system32\DRIVERS\audstub.sys [MANUAL] audstub Service BattC Service [SYSTEM] Beep Service C:\WINDOWS\system32\svchost.exe [MANUAL] BITS Service C:\WINDOWS\system32\svchost.exe [AUTO] Browser Service [DISABLED] cbidf2k Service [DISABLED] cd20xrnt Service [SYSTEM] Cdaudio Service [DISABLED] Cdfs Service C:\WINDOWS\system32\DRIVERS\cdrom.sys [SYSTEM] Cdrom Service [SYSTEM] Changer Service C:\WINDOWS\system32\cisvc.exe [MANUAL] CiSvc Service C:\WINDOWS\system32\clipsrv.exe [DISABLED] ClipSrv Service [DISABLED] CmdIde Service C:\WINDOWS\system32\dllhost.exe [MANUAL] COMSysApp Service ContentFilter Service ContentIndex Service [DISABLED] Cpqarray Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc Service [DISABLED] dac2w2k Service [DISABLED] dac960nt Service C:\WINDOWS\system32\svchost.exe [AUTO] DcomLaunch Service C:\WINDOWS\system32\svchost.exe [AUTO] Dhcp Service C:\WINDOWS\system32\DRIVERS\disk.sys [BOOT] Disk Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot Service C:\WINDOWS\System32\drivers\dmio.sys [BOOT] dmio Service C:\WINDOWS\System32\drivers\dmload.sys [BOOT] dmload Service C:\WINDOWS\System32\svchost.exe [AUTO] dmserver Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic Service C:\WINDOWS\system32\svchost.exe [AUTO] Dnscache Service [DISABLED] dpti2o Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog Service C:\WINDOWS\system32\svchost.exe [MANUAL] EventSystem Service C:\Program Files\ewido anti-spyware 4.0\guard.sys [SYSTEM] ewido anti-spyware 4.0 driver Service C:\Program Files\ewido anti-spyware 4.0\guard.exe [AUTO] ewido anti-spyware 4.0 guard Service [DISABLED] Fastfat Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility Service C:\WINDOWS\system32\DRIVERS\fdc.sys [MANUAL] Fdc Service [SYSTEM] Fips Service C:\WINDOWS\system32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk Service C:\WINDOWS\system32\DRIVERS\fltMgr.sys [BOOT] FltMgr Service [SYSTEM] Fs_Rec Service C:\WINDOWS\system32\DRIVERS\ftdisk.sys [BOOT] Ftdisk Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer Service C:\WINDOWS\system32\DRIVERS\msgpc.sys [MANUAL] Gpc Service [MANUAL] GVCplDrv Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ Service C:\WINDOWS\system32\DRIVERS\hidusb.sys [MANUAL] hidusb Service [DISABLED] hpn Service C:\WINDOWS\System32\Drivers\HTTP.sys [MANUAL] HTTP Service C:\WINDOWS\System32\svchost.exe [MANUAL] HTTPFilter Service [SYSTEM] i2omgmt Service [DISABLED] i2omp Service C:\WINDOWS\system32\DRIVERS\i8042prt.sys [SYSTEM] i8042prt Service C:\WINDOWS\system32\DRIVERS\imapi.sys [SYSTEM] Imapi Service C:\WINDOWS\system32\imapi.exe [MANUAL] ImapiService Service inetaccs Service [DISABLED] ini910u Service Inport Service [DISABLED] IntelIde Service C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys [MANUAL] Ip6Fw Service C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver Service C:\WINDOWS\system32\DRIVERS\ipinip.sys [MANUAL] IpInIp Service C:\WINDOWS\system32\DRIVERS\ipnat.sys [MANUAL] IpNat Service C:\WINDOWS\system32\DRIVERS\ipsec.sys [SYSTEM] IPSec Service C:\WINDOWS\system32\DRIVERS\irda.sys [AUTO] irda Service C:\WINDOWS\system32\DRIVERS\irenum.sys [MANUAL] IRENUM Service C:\WINDOWS\system32\svchost.exe [AUTO] Irmon Service C:\WINDOWS\system32\DRIVERS\irsir.sys [MANUAL] irsir Service ISAPISearch Service C:\WINDOWS\system32\DRIVERS\isapnp.sys [BOOT] isapnp Service C:\WINDOWS\system32\DRIVERS\k750bus.sys [MANUAL] k750bus Service C:\WINDOWS\system32\DRIVERS\k750mdfl.sys [MANUAL] k750mdfl Service C:\WINDOWS\system32\DRIVERS\k750mdm.sys [MANUAL] k750mdm Service C:\WINDOWS\system32\DRIVERS\k750mgmt.sys [MANUAL] k750mgmt Service C:\WINDOWS\system32\DRIVERS\k750obex.sys [MANUAL] k750obex Service C:\WINDOWS\system32\DRIVERS\kbdclass.sys [SYSTEM] Kbdclass Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer Service [BOOT] KSecDD Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanserver Service C:\WINDOWS\system32\svchost.exe [AUTO] lanmanworkstation Service [SYSTEM] lbrtfdc Service ldap Service LicenseService Service C:\WINDOWS\system32\DRIVERS\lirsgt.sys [AUTO] lirsgt Service C:\WINDOWS\system32\svchost.exe [AUTO] LmHosts Service C:\WINDOWS\system32\svchost.exe [AUTO] Messenger Service [SYSTEM] mnmdd Service C:\WINDOWS\system32\mnmsrvc.exe [MANUAL] mnmsrvc Service [MANUAL] Modem Service C:\WINDOWS\system32\DRIVERS\mouclass.sys [SYSTEM] Mouclass Service C:\WINDOWS\system32\DRIVERS\mouhid.sys [MANUAL] mouhid Service [BOOT] MountMgr Service [DISABLED] mraid35x Service C:\WINDOWS\system32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV Service C:\WINDOWS\system32\DRIVERS\mrxsmb.sys [SYSTEM] MRxSmb Service C:\WINDOWS\system32\msdtc.exe [MANUAL] MSDTC Service [SYSTEM] Msfs Service C:\WINDOWS\system32\msiexec.exe [MANUAL] MSIServer Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM Service C:\WINDOWS\system32\DRIVERS\mssmbios.sys [MANUAL] mssmbios Service [BOOT] Mup Service [BOOT] NDIS Service C:\WINDOWS\system32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi Service C:\WINDOWS\system32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio Service C:\WINDOWS\system32\DRIVERS\ndiswan.sys [MANUAL] NdisWan Service [MANUAL] NDProxy Service C:\WINDOWS\system32\DRIVERS\netbios.sys [SYSTEM] NetBIOS Service C:\WINDOWS\system32\DRIVERS\netbt.sys [MANUAL] NetBT Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDE Service C:\WINDOWS\system32\netdde.exe [DISABLED] NetDDEdsdm Service C:\WINDOWS\system32\lsass.exe [MANUAL] Netlogon Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman Service C:\WINDOWS\system32\DRIVERS\nic1394.sys [MANUAL] NIC1394 Service C:\WINDOWS\system32\svchost.exe [MANUAL] Nla Service [SYSTEM] Npfs Service [DISABLED] Ntfs Service C:\WINDOWS\system32\lsass.exe [MANUAL] NtLmSsp Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc Service [SYSTEM] Null Service C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [MANUAL] nv Service C:\WINDOWS\system32\DRIVERS\nvatabus.sys [BOOT] nvatabus Service C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [MANUAL] NVENETFD Service C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [MANUAL] nvnetbus Service C:\WINDOWS\system32\nvsvc32.exe [AUTO] NVSvc Service C:\WINDOWS\system32\svchost.exe [AUTO] NWCWorkstation Service C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt Service C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd Service C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys [AUTO] NwlnkIpx Service C:\WINDOWS\system32\DRIVERS\nwlnknb.sys [AUTO] NwlnkNb Service C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys [AUTO] NwlnkSpx Service C:\WINDOWS\system32\DRIVERS\nwrdr.sys [MANUAL] NWRDR Service C:\WINDOWS\system32\DRIVERS\ohci1394.sys [BOOT] ohci1394 Service C:\WINDOWS\system32\DRIVERS\parport.sys [MANUAL] Parport Service [BOOT] PartMgr Service [AUTO] ParVdm Service C:\WINDOWS\system32\DRIVERS\pci.sys [BOOT] PCI Service [SYSTEM] PCIDump Service C:\WINDOWS\system32\DRIVERS\pciide.sys [BOOT] PCIIde Service [DISABLED] Pcmcia Service [MANUAL] PDCOMP Service [MANUAL] PDFRAME Service [MANUAL] PDRELI Service [MANUAL] PDRFRAME Service [DISABLED] perc2 Service [DISABLED] perc2hib Service PerfDisk Service PerfNet Service PerfOS Service PerfProc Service C:\WINDOWS\system32\drivers\pfc.sys [MANUAL] pfc Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay Service C:\WINDOWS\system32\lsass.exe [AUTO] PolicyAgent Service C:\WINDOWS\system32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport Service C:\WINDOWS\system32\DRIVERS\processr.sys [SYSTEM] Processor Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage Service C:\WINDOWS\system32\DRIVERS\psched.sys [MANUAL] PSched Service C:\WINDOWS\system32\DRIVERS\ptilink.sys [MANUAL] Ptilink Service C:\WINDOWS\system32\DRIVERS\PxHelp20.sys [BOOT] PxHelp20 Service [DISABLED] ql1080 Service [DISABLED] Ql10wnt Service [DISABLED] ql12160 Service [DISABLED] ql1240 Service [DISABLED] ql1280 Service C:\WINDOWS\system32\DRIVERS\rasacd.sys [SYSTEM] RasAcd Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasAuto Service C:\WINDOWS\system32\DRIVERS\rasirda.sys [MANUAL] Rasirda Service C:\WINDOWS\system32\DRIVERS\rasl2tp.sys [MANUAL] Rasl2tp Service C:\WINDOWS\system32\svchost.exe [MANUAL] RasMan Service C:\WINDOWS\system32\DRIVERS\raspppoe.sys [MANUAL] RasPppoe Service C:\WINDOWS\system32\DRIVERS\raspti.sys [MANUAL] Raspti Service C:\WINDOWS\system32\DRIVERS\rdbss.sys [SYSTEM] Rdbss Service C:\WINDOWS\System32\DRIVERS\RDPCDD.sys [SYSTEM] RDPCDD Service RDPDD Service C:\WINDOWS\system32\DRIVERS\rdpdr.sys [MANUAL] rdpdr Service RDPNP Service [MANUAL] RDPWD Service C:\WINDOWS\system32\sessmgr.exe [MANUAL] RDSessMgr Service C:\WINDOWS\system32\DRIVERS\redbook.sys [SYSTEM] redbook Service C:\WINDOWS\system32\svchost.exe [DISABLED] RemoteAccess Service C:\WINDOWS\system32\svchost.exe [AUTO] RemoteRegistry Service C:\WINDOWS\system32\locator.exe [MANUAL] RpcLocator Service C:\WINDOWS\system32\svchost.exe [AUTO] RpcSs Service C:\WINDOWS\system32\rsvp.exe [MANUAL] RSVP Service C:\WINDOWS\system32\lsass.exe [AUTO] SamSs Service C:\WINDOWS\System32\SCardSvr.exe [MANUAL] SCardSvr Service C:\WINDOWS\System32\svchost.exe [AUTO] Schedule Service C:\WINDOWS\system32\DRIVERS\secdrv.sys [AUTO] Secdrv Service C:\WINDOWS\System32\svchost.exe [AUTO] seclogon Service C:\WINDOWS\system32\svchost.exe [AUTO] SENS Service C:\WINDOWS\system32\DRIVERS\serenum.sys [MANUAL] serenum Service C:\WINDOWS\system32\DRIVERS\serial.sys [SYSTEM] Serial Service [SYSTEM] Sfloppy Service C:\WINDOWS\system32\svchost.exe [AUTO] SharedAccess Service C:\WINDOWS\System32\svchost.exe [AUTO] ShellHWDetection Service [DISABLED] Simbad Service [DISABLED] Sparrow Service C:\WINDOWS\system32\drivers\splitter.sys [MANUAL] splitter Service C:\WINDOWS\system32\spoolsv.exe [AUTO] Spooler Service C:\WINDOWS\System32\Drivers\sptd.sys [BOOT] sptd Service C:\WINDOWS\system32\DRIVERS\sr.sys [BOOT] sr Service C:\WINDOWS\system32\svchost.exe [AUTO] srservice Service C:\WINDOWS\system32\DRIVERS\srv.sys [MANUAL] Srv Service C:\WINDOWS\system32\svchost.exe [AUTO] SSDPSRV Service C:\WINDOWS\system32\svchost.exe [AUTO] stisvc Service C:\WINDOWS\system32\DRIVERS\swenum.sys [MANUAL] swenum Service C:\WINDOWS\system32\drivers\swmidi.sys [MANUAL] swmidi Service C:\WINDOWS\system32\dllhost.exe [MANUAL] SwPrv Service [DISABLED] symc810 Service [DISABLED] symc8xx Service [DISABLED] sym_hi Service [DISABLED] sym_u3 Service C:\WINDOWS\system32\drivers\sysaudio.sys [MANUAL] sysaudio Service C:\WINDOWS\system32\smlogsvc.exe [MANUAL] SysmonLog Service C:\WINDOWS\System32\svchost.exe [MANUAL] TapiSrv Service C:\WINDOWS\system32\DRIVERS\tcpip.sys [SYSTEM] Tcpip Service [MANUAL] TDPIPE Service [MANUAL] TDTCP Service C:\WINDOWS\system32\DRIVERS\termdd.sys [SYSTEM] TermDD Service C:\WINDOWS\System32\svchost.exe [MANUAL] TermService Service C:\WINDOWS\System32\svchost.exe [AUTO] Themes Service C:\WINDOWS\system32\tlntsvr.exe [DISABLED] TlntSvr Service [DISABLED] TosIde Service C:\WINDOWS\system32\svchost.exe [AUTO] TrkWks Service TSDDD Service [DISABLED] Udfs Service [DISABLED] ultra Service C:\WINDOWS\system32\wdfmgr.exe [MANUAL] UMWdf Service C:\WINDOWS\system32\DRIVERS\update.sys [MANUAL] Update Service C:\WINDOWS\system32\svchost.exe [AUTO] upnphost Service C:\WINDOWS\System32\ups.exe [MANUAL] UPS Service usb Service C:\WINDOWS\system32\DRIVERS\usbehci.sys [MANUAL] usbehci Service C:\WINDOWS\system32\DRIVERS\usbhub.sys [MANUAL] usbhub Service C:\WINDOWS\system32\DRIVERS\usbohci.sys [MANUAL] usbohci Service C:\WINDOWS\system32\DRIVERS\usbscan.sys [MANUAL] usbscan Service C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [MANUAL] USBSTOR Service C:\WINDOWS\System32\drivers\vga.sys [SYSTEM] VgaSave Service [DISABLED] ViaIde Service [BOOT] VolSnap Service C:\WINDOWS\System32\vssvc.exe [MANUAL] VSS Service C:\WINDOWS\System32\svchost.exe [AUTO] W32Time Service W3SVC Service C:\WINDOWS\system32\DRIVERS\wanarp.sys [MANUAL] Wanarp Service [MANUAL] WDICA Service C:\WINDOWS\system32\drivers\wdmaud.sys [MANUAL] wdmaud Service C:\WINDOWS\system32\svchost.exe [AUTO] WebClient Service C:\WINDOWS\system32\svchost.exe [AUTO] winmgmt Service [MANUAL] Winsock Service WinSock2 Service WinTrust Service C:\Program Files\Windows Media Connect 2\wmccds.exe [MANUAL] WMConnectCDS Service C:\WINDOWS\System32\svchost.exe [MANUAL] WmdmPmSN Service C:\WINDOWS\System32\svchost.exe [MANUAL] Wmi Service WmiApRpl Service C:\WINDOWS\system32\wbem\wmiapsrv.exe [MANUAL] WmiApSrv Service [SYSTEM] WS2IFSL Service C:\WINDOWS\System32\svchost.exe [DISABLED] wscsvc Service C:\WINDOWS\system32\svchost.exe [DISABLED] wuauserv Service C:\WINDOWS\System32\svchost.exe [AUTO] WZCSVC Service C:\WINDOWS\System32\svchost.exe [MANUAL] xmlprov Service {42E904B0-A296-4822-81BA-5B89F09D8A09} Service {88D63C9C-D9EB-4C08-99D1-F43E0BEE6FC7} Service [MANUAL] ati43azh ---- EOF - GMER 1.0.12 ----

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 16:45

w 1 logu nic nie ma
podeslij caly 2

**Posty:** 3874 · przez **Wojtasgls** 01 Kwi 2007, 16:47

Kod: Zaznacz wszystko: GMER 1.0.12.12086 - http://www.gmer.net Rootkit scan 2007-04-01 16:32:37 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.12 ---- SSDT sptd.sys ZwCreateKey SSDT sptd.sys ZwEnumerateKey SSDT sptd.sys ZwEnumerateValueKey SSDT sptd.sys ZwOpenKey SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT sptd.sys ZwQueryKey SSDT sptd.sys ZwQueryValueKey SSDT sptd.sys ZwSetValueKey SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess ---- Kernel code sections - GMER 1.0.12 ---- ? C:\WINDOWS\system32\drivers\sptd.sys The process cannot access the file because it is being used by another process. .text USBPORT.SYS!DllUnload F606F80C 5 Bytes JMP 864F91B8 ? System32\Drivers\ati43azh.SYS The system cannot find the file specified. ---- User code sections - GMER 1.0.12 ---- .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!SetScrollInfo 77D49066 7 Bytes JMP 0141B7C6 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!GetScrollInfo 77D50E1A 7 Bytes JMP 0141B74E C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!ShowScrollBar 77D5F2D5 5 Bytes JMP 0141B84A C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!GetScrollPos 77D5F6E4 5 Bytes JMP 0141B776 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!SetScrollPos 77D5F730 5 Bytes JMP 0141B7F1 C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!GetScrollRange 77D5F767 5 Bytes JMP 0141B79B C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!SetScrollRange 77D5F97B 5 Bytes JMP 0141B81C C:\Program Files\Winamp\Plugins\gen_jumpex.dll .text C:\Program Files\Winamp\winamp.exe[3224] USER32.dll!EnableScrollBar 77D97BCD 7 Bytes JMP 0141B726 C:\Program Files\Winamp\Plugins\gen_jumpex.dll ---- Devices - GMER 1.0.12 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 867D11D8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 867D11D8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLOSE 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_WRITE 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_EA 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FLUSH_BUFFERS 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_VOLUME_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_VOLUME_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DIRECTORY_CONTROL 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FILE_SYSTEM_CONTROL 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DEVICE_CONTROL 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SHUTDOWN 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_LOCK_CONTROL 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLEANUP 862CB3F8 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_PNP 862CB3F8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CREATE 864F81D8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CLOSE 864F81D8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 864F81D8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 864F81D8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_POWER 864F81D8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 864F81D8 Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_PNP 864F81D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 867D31D8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 867D31D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CREATE 864EC1D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CLOSE 864EC1D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 864EC1D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 864EC1D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_POWER 864EC1D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 864EC1D8 Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_PNP 864EC1D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{E7FAC2A2-7766-41FF-B349-60DDCDEAC170} IRP_MJ_CREATE 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{E7FAC2A2-7766-41FF-B349-60DDCDEAC170} IRP_MJ_CLOSE 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{E7FAC2A2-7766-41FF-B349-60DDCDEAC170} IRP_MJ_DEVICE_CONTROL 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{E7FAC2A2-7766-41FF-B349-60DDCDEAC170} IRP_MJ_INTERNAL_DEVICE_CONTROL 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{E7FAC2A2-7766-41FF-B349-60DDCDEAC170} IRP_MJ_CLEANUP 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{E7FAC2A2-7766-41FF-B349-60DDCDEAC170} IRP_MJ_PNP 863FD740 Device \Driver\00000041 \Device\00000048 IRP_MJ_POWER [F7413C7E] sptd.sys Device \Driver\00000041 \Device\00000048 IRP_MJ_SYSTEM_CONTROL [F742D2A2] sptd.sys Device \Driver\00000041 \Device\00000048 IRP_MJ_PNP [F742E228] sptd.sys Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 867661D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 863C91D8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 863C91D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 867661D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 863C91D8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 863C91D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CREATE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_READ 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_WRITE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_FLUSH_BUFFERS 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_INTERNAL_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SHUTDOWN 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CLEANUP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_POWER 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SYSTEM_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_PNP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_CREATE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_READ 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_WRITE 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_FLUSH_BUFFERS 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_INTERNAL_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_SHUTDOWN 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_CLEANUP 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_POWER 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_SYSTEM_CONTROL 867661D8 Device \Driver\Ftdisk \Device\HarddiskVolume5 IRP_MJ_PNP 867661D8 Device \Driver\NetBT \Device\NetBT_Tcpip_{42E904B0-A296-4822-81BA-5B89F09D8A09} IRP_MJ_CREATE 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{42E904B0-A296-4822-81BA-5B89F09D8A09} IRP_MJ_CLOSE 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{42E904B0-A296-4822-81BA-5B89F09D8A09} IRP_MJ_DEVICE_CONTROL 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{42E904B0-A296-4822-81BA-5B89F09D8A09} IRP_MJ_INTERNAL_DEVICE_CONTROL 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{42E904B0-A296-4822-81BA-5B89F09D8A09} IRP_MJ_CLEANUP 863FD740 Device \Driver\NetBT \Device\NetBT_Tcpip_{42E904B0-A296-4822-81BA-5B89F09D8A09} IRP_MJ_PNP 863FD740 Device \Driver\nvatabus \Device\00000069 IRP_MJ_CREATE 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_CREATE_NAMED_PIPE 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_CLOSE 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_READ 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_WRITE 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_QUERY_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SET_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_QUERY_EA 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SET_EA 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_FLUSH_BUFFERS 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_QUERY_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SET_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_DIRECTORY_CONTROL 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_FILE_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SHUTDOWN 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_LOCK_CONTROL 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_CLEANUP 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_CREATE_MAILSLOT 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_QUERY_SECURITY 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SET_SECURITY 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_POWER 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_DEVICE_CHANGE 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_QUERY_QUOTA 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_SET_QUOTA 867D21D8 Device \Driver\nvatabus \Device\00000069 IRP_MJ_PNP 867D21D8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 863FD740 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 863FD740 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 863FD740 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 863FD740 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 863FD740 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 863FD740 Device \Driver\nvatabus \Device\0000006a IRP_MJ_CREATE 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_CREATE_NAMED_PIPE 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_CLOSE 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_READ 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_WRITE 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_QUERY_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SET_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_QUERY_EA 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SET_EA 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_FLUSH_BUFFERS 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_QUERY_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SET_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_DIRECTORY_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_FILE_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SHUTDOWN 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_LOCK_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_CLEANUP 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_CREATE_MAILSLOT 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_QUERY_SECURITY 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SET_SECURITY 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_POWER 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_DEVICE_CHANGE 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_QUERY_QUOTA 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_SET_QUOTA 867D21D8 Device \Driver\nvatabus \Device\0000006a IRP_MJ_PNP 867D21D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CREATE 864F81D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CLOSE 864F81D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 864F81D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 864F81D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_POWER 864F81D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 864F81D8 Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_PNP 864F81D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_CREATE 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_CREATE_NAMED_PIPE 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_CLOSE 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_READ 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_WRITE 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_QUERY_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SET_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_QUERY_EA 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SET_EA 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_FLUSH_BUFFERS 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_QUERY_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SET_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_DIRECTORY_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_FILE_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SHUTDOWN 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_LOCK_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_CLEANUP 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_CREATE_MAILSLOT 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_QUERY_SECURITY 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SET_SECURITY 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_POWER 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_DEVICE_CHANGE 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_QUERY_QUOTA 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_SET_QUOTA 867D21D8 Device \Driver\nvatabus \Device\0000006c IRP_MJ_PNP 867D21D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_CREATE 864EC1D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_CLOSE 864EC1D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 864EC1D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 864EC1D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_POWER 864EC1D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 864EC1D8 Device \Driver\usbehci \Device\USBFDO-1 IRP_MJ_PNP 864EC1D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_CREATE 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_CREATE_NAMED_PIPE 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_CLOSE 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_READ 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_WRITE 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_QUERY_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SET_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_QUERY_EA 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SET_EA 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_FLUSH_BUFFERS 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_QUERY_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SET_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_DIRECTORY_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_FILE_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SHUTDOWN 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_LOCK_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_CLEANUP 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_CREATE_MAILSLOT 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_QUERY_SECURITY 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SET_SECURITY 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_POWER 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_DEVICE_CHANGE 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_QUERY_QUOTA 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_SET_QUOTA 867D21D8 Device \Driver\nvatabus \Device\NvAta0 IRP_MJ_PNP 867D21D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 858331D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_CREATE 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_CREATE_NAMED_PIPE 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_CLOSE 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_READ 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_WRITE 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_QUERY_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SET_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_QUERY_EA 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SET_EA 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_FLUSH_BUFFERS 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_QUERY_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SET_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_DIRECTORY_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_FILE_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SHUTDOWN 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_LOCK_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_CLEANUP 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_CREATE_MAILSLOT 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_QUERY_SECURITY 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SET_SECURITY 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_POWER 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_DEVICE_CHANGE 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_QUERY_QUOTA 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_SET_QUOTA 867D21D8 Device \Driver\nvatabus \Device\NvAta1 IRP_MJ_PNP 867D21D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 858331D8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 858331D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_CREATE 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_CREATE_NAMED_PIPE 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_CLOSE 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_READ 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_WRITE 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_QUERY_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SET_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_QUERY_EA 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SET_EA 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_FLUSH_BUFFERS 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_QUERY_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SET_VOLUME_INFORMATION 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_DIRECTORY_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_FILE_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_INTERNAL_DEVICE_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SHUTDOWN 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_LOCK_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_CLEANUP 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_CREATE_MAILSLOT 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_QUERY_SECURITY 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SET_SECURITY 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_POWER 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SYSTEM_CONTROL 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_DEVICE_CHANGE 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_QUERY_QUOTA 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_SET_QUOTA 867D21D8 Device \Driver\nvatabus \Device\NvAta2 IRP_MJ_PNP 867D21D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 867661D8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 867661D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_CREATE 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_CLOSE 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_DEVICE_CONTROL 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_INTERNAL_DEVICE_CONTROL 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_POWER 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_SYSTEM_CONTROL 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1 IRP_MJ_PNP 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_CREATE 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_CLOSE 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_POWER 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 863BC8D8 Device \Driver\ati43azh \Device\Scsi\ati43azh1Port3Path0Target0Lun0 IRP_MJ_PNP 863BC8D8 Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_CLOSE 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_READ 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_WRITE 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_SET_EA 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP 862CB3F8 Device \FileSystem\Fastfat \Fat IRP_MJ_PNP 862CB3F8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 862DC7E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 862DC7E8 ---- EOF - GMER 1.0.12 ----

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 16:50

odpal:

http://users.telenet.be/marcvn/tools/haxfix.exe

z opcji 1 i daj loga z tego

**Posty:** 3874 · przez **Wojtasgls** 01 Kwi 2007, 21:36

Kod: Zaznacz wszystko: HAXFIX logfile - by Marckie version 4.39 2007-04-01 21:21:48,57 --- Checking for Haxdoor --- checking for a3d files a3d files not found checking for matching notify keys no matching notify keys found checking for matching services no matching services found checking for matching safeboot services no matching safeboot services found checking for other Haxdoor-files no other Haxdoor-files found --- Checking for Goldun --- checking for SSODL keys no ssodl keys found checking for notify keys no notify keys found checking for services no services found checking for other Goldun-files no other Goldun-files found checking iexplore.exe iexplore.exe is not infected Finished!

Aha zapomnialem dodac ze mam jeszcze jedna objawe dziwnego dzialania kompa.. Wylaczanie zdecydowanie dluzej trwa niz normalnie

**Posty:** 18165 · przez **wojtas** 01 Kwi 2007, 22:39

nie widac zadnego syfu.

Zrob defrgmentacje

start>urchom> wpisz msconfig> zakladka uruchamianie> wylacz progsy ktore nie chcesz zeby startowaly z systemem

Autor postu otrzymał pochwałę

problem z ie

problem z ie

Kto jest na forum