aeropic

Merci pour ton aide, je crois que je vais tout reinstaller à partir d'un ghost, manière de repartir sur des bases saines .... A+ Alain

suite bis ===== Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 82747880 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 82747880 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83394A40 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 82747880 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 82E8F3B8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 82E8F3B8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 82746368 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 82E852C8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 82E868F8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DF650 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 8275FB10 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82D9C220 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CHANGE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_PNP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_PNP_POWER 82D9C220 Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_CREATE 82F8D278 Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE 82E6DCA8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 8281E0E8 ---- Modules - GMER 1.0.10 ---- Module _________ F8626000 ---- Registry - GMER 1.0.10 ---- Reg \Registry\MACHINE\SOFTWARE\Microsoft\Shared Tools\ ---- Files - GMER 1.0.10 ---- File C:\System Volume Information\MountPointManagerRemoteDatabase File C:\System Volume Information\tracking.log File C:\System Volume Information\_restore{33778183-F681-4128-A53B-FCFB9C341969} File D:\System Volume Information\MountPointManagerRemoteDatabase File D:\System Volume Information\tracking.log File D:\System Volume Information\_restore{33778183-F681-4128-A53B-FCFB9C341969} ---- EOF - GMER 1.0.10 ----

voila le résultat de coincoin.exe AVAST a râlé ce matin, mais ce soir il ne se passe rien ... part 1 ==== GMER 1.0.10.10122 - http://www.gmer.net Rootkit 2006-09-04 22:11:10 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.10 ---- SSDT Vax347b.sys ZwClose SSDT Vax347b.sys ZwCreateKey SSDT Vax347b.sys ZwCreatePagingFile SSDT Vax347b.sys ZwEnumerateKey SSDT Vax347b.sys ZwEnumerateValueKey SSDT Vax347b.sys ZwOpenKey SSDT Vax347b.sys ZwQueryKey SSDT Vax347b.sys ZwQueryValueKey SSDT Vax347b.sys ZwSetSystemPowerState SSDT sptd.sys ZwSetValueKey ---- Devices - GMER 1.0.10 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 83394808 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 82E6DCA8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 833DF398 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 833DF650 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 833DF650 Device \Driver\00000046 \Device\00000059 IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys Device \Driver\00000046 \Device\00000059 IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys Device \Driver\00000046 \Device\00000059 IRP_MJ_PNP_POWER [F871B54E] sptd.sys Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSEIRP_MJ_READ 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 82E76FB0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 826EC398 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_PNP 826EC398 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSEIRP_MJ_READ 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 82EB1470 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSEIRP_MJ_READ 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 82EB1470 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSEIRP_MJ_READ 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSEIRP_MJ_READ 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_NAMED_PIPE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLOSEIRP_MJ_READ 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_WRITE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_EA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FLUSH_BUFFERS 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_VOLUME_INFORMATION 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DIRECTORY_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SHUTDOWN 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_LOCK_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLEANUP 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_MAILSLOT 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_SECURITY 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_POWER 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SYSTEM_CONTROL 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CHANGE 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_QUOTA 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP 82EB1470 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP_POWER 82EB1470 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 la suite ====== Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82EB3CF8 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82EB3CF8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 82747880 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 82747880 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83394A40 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 82747880 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 82E8F3B8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 82746368 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 82E8F3B8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 82746368 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 82746368 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 82E852C8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 82E868F8 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 82E868F8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DF650 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 8275FB10 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82D9C220 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 82D9C220 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_SECURITY 82D9C220 Devi

Je me suis encore fait avoir ... j'ai jeté le log ==> a refaire demain !

j'ai refait un gmer à tout hazard : GMER 1.0.10.10122 - http://www.gmer.net Rootkit 2006-09-03 21:20:25 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.10 ---- SSDT Vax347b.sys ZwClose SSDT Vax347b.sys ZwCreateKey SSDT Vax347b.sys ZwCreatePagingFile SSDT Vax347b.sys ZwEnumerateKey SSDT Vax347b.sys ZwEnumerateValueKey SSDT Vax347b.sys ZwOpenKey SSDT Vax347b.sys ZwQueryKey SSDT Vax347b.sys ZwQueryValueKey SSDT Vax347b.sys ZwSetSystemPowerState SSDT sptd.sys ZwSetValueKey ---- Devices - GMER 1.0.10 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 83394808 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 82DC6CB0 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 833DF398 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 833DF650 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 833DF650 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP_POWER 82ECC7B0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSEIRP_MJ_READ 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 82D37F08 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 82F289C0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_PNP 82F289C0 Device \Driver\00000046 \Device\00000059 IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys Device \Driver\00000046 \Device\00000059 IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys Device \Driver\00000046 \Device\00000059 IRP_MJ_PNP_POWER [F871B54E] sptd.sys Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP_POWER 82ECC7B0 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 82E5D698 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 82E5D698 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSEIRP_MJ_READ 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_NAMED_PIPE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_WRITE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_EA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FLUSH_BUFFERS 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DIRECTORY_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SHUTDOWN 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_LOCK_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLEANUP 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_MAILSLOT 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_SECURITY 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_POWER 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SYSTEM_CONTROL 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CHANGE 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_QUOTA 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP 82E5D698 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP_POWER 82E5D698 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82ECC7B0 GMER suite ======= Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82ECC7B0 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82ECC7B0 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 82C083B0 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 82C083B0 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83394A40 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 82C083B0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 82D1C470 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 82C45810 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 82D1C470 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 82C45810 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 82C45810 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 82C10898 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 82C10898 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 82C10898 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 82DE4418 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 82C10898 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 82C10898 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 82C10898 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DF650 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 82E76980 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82CD9338 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_SECURITY 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_SECURITY 82CD9338 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Tar

J'ai désinstazllé AVAST, puis je l'ai reinstallé J'ai laissé toutner le PC 2 ou 3 heures sans rien d'actif AU bout de trois heures, AVAST a de nouveau râlé J'ai lancé rootkitrevealer et obtenu un log équivalent à une ligne près HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed ... J'avoue être un peu démoralisé malgrès ton aide précieuse ! Voila le log ======= HKLM\S-1-5-21-1547161642-854245398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{95402B42-15DE-DDB2-C63E-BCC04F0E2316}* 12/08/2006 16:12 0 bytes Key name contains embedded nulls (*) HKLM\SOFTWARE\Classes\Installer\Products\32418F9EE1126B64A90E8365B85CFCF6\ProductName 30/12/2005 23:51 26 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Hagel\DU Meter\Totals 03/09/2006 20:50 80 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 03/09/2006 20:51 80 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Shared Tools\ 24/12/2005 13:23 0 bytes Key name contains embedded nulls (*) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}\DisplayName 30/12/2005 23:54 26 bytes Data mismatch between Windows API and raw hive data. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s0 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s1 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s2 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\g0 09/04/2006 11:04 32 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\h0 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 09/04/2006 11:05 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\Vax347s\Config\jdgg40 03/09/2006 19:44 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\Vax347s\Config\jdgg41 03/09/2006 19:44 0 bytes Hidden from Windows API. C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll 13/07/2006 23:10 252.00 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll 13/07/2006 23:10 111.50 KB Visible in Windows API, but not in MFT or directory index.

Bizarre rootkitrevealer ... Je le lance depuis mon compte (admin) et l'IHM monter sur le compte d'un de mes fils (compte limité). J'ai quand même scanné : HKLM\S-1-5-21-1547161642-854245398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{95402B42-15DE-DDB2-C63E-BCC04F0E2316}* 12/08/2006 16:12 0 bytes Key name contains embedded nulls (*) HKLM\SOFTWARE\Classes\Installer\Products\32418F9EE1126B64A90E8365B85CFCF6\ProductName 30/12/2005 23:51 26 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Hagel\DU Meter\Totals 03/09/2006 15:45 80 bytes Data mismatch between Windows API and raw hive data. HKLM\SOFTWARE\Microsoft\Shared Tools\ 24/12/2005 13:23 0 bytes Key name contains embedded nulls (*) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}\DisplayName 30/12/2005 23:54 26 bytes Data mismatch between Windows API and raw hive data. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s0 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s1 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s2 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\g0 09/04/2006 11:04 32 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\h0 09/04/2006 11:04 4 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 09/04/2006 11:05 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\Vax347s\Config\jdgg40 03/09/2006 14:06 0 bytes Hidden from Windows API. HKLM\SYSTEM\ControlSet006\Services\Vax347s\Config\jdgg41 03/09/2006 14:06 0 bytes Hidden from Windows API. C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll 13/07/2006 23:10 252.00 KB Visible in Windows API, but not in MFT or directory index. C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll 13/07/2006 23:10 111.50 KB Visible in Windows API, but not in MFT or directory index.

Avast désactivé ==> ça ne change rien. Le processus rootkitrevealer est présent dans le gestionnaire des tâches mais aucne IHM ne monte

j'ai téléchargé rootkitrevealer, mais je n'arrive pas à le faire fonctionner. en double cliquant sur rootkitrevealer.exe, l'ordi fait un pinf sonore et c'est tout. J'ai essayé en ligne de commande après copie sur C: C:\rootkitrevealer -a c:\rootlog.txt le fichjier est créé mais est vide ...

voila cnx.txt ======== Connexions actives Proto Adresse locale Adresse distante Etat TCP 0.0.0.0:135 0.0.0.0:0 LISTENING 1296 TCP 0.0.0.0:445 0.0.0.0:0 LISTENING 4 TCP 0.0.0.0:1678 0.0.0.0:0 LISTENING 496 TCP 0.0.0.0:3260 0.0.0.0:0 LISTENING 1640 TCP 0.0.0.0:3261 0.0.0.0:0 LISTENING 1640 TCP 0.0.0.0:31038 0.0.0.0:0 LISTENING 740 TCP 82.249.178.80:139 0.0.0.0:0 LISTENING 4 TCP 82.249.178.80:1585 213.251.138.100:80 TIME_WAIT 0 TCP 82.249.178.80:1587 213.251.138.100:80 TIME_WAIT 0 TCP 82.249.178.80:1593 66.249.93.104:80 ESTABLISHED 2256 TCP 82.249.178.80:1595 213.186.34.126:80 TIME_WAIT 0 TCP 82.249.178.80:1602 64.233.183.104:80 ESTABLISHED 2256 TCP 82.249.178.80:1605 130.117.119.104:80 TIME_WAIT 0 TCP 82.249.178.80:1607 213.251.139.21:80 CLOSE_WAIT 2256 TCP 127.0.0.1:1029 0.0.0.0:0 LISTENING 2412 TCP 127.0.0.1:1324 127.0.0.1:1325 ESTABLISHED 2380 TCP 127.0.0.1:1325 127.0.0.1:1324 ESTABLISHED 2380 TCP 127.0.0.1:1590 127.0.0.1:12080 TIME_WAIT 0 TCP 127.0.0.1:1592 127.0.0.1:12080 ESTABLISHED 2380 TCP 127.0.0.1:1601 127.0.0.1:12080 ESTABLISHED 2380 TCP 127.0.0.1:1604 127.0.0.1:12080 TIME_WAIT 0 TCP 127.0.0.1:1606 127.0.0.1:12080 ESTABLISHED 2380 TCP 127.0.0.1:1608 127.0.0.1:12025 TIME_WAIT 0 TCP 127.0.0.1:1615 127.0.0.1:12025 TIME_WAIT 0 TCP 127.0.0.1:5679 0.0.0.0:0 LISTENING 3540 TCP 127.0.0.1:12025 0.0.0.0:0 LISTENING 2176 TCP 127.0.0.1:12080 0.0.0.0:0 LISTENING 2256 TCP 127.0.0.1:12080 127.0.0.1:1592 ESTABLISHED 2256 TCP 127.0.0.1:12080 127.0.0.1:1601 ESTABLISHED 2256 TCP 127.0.0.1:12080 127.0.0.1:1606 ESTABLISHED 2256 TCP 127.0.0.1:12080 127.0.0.1:1622 TIME_WAIT 0 TCP 127.0.0.1:12110 0.0.0.0:0 LISTENING 2176 TCP 127.0.0.1:12110 127.0.0.1:1620 TIME_WAIT 0 TCP 127.0.0.1:12119 0.0.0.0:0 LISTENING 2176 TCP 127.0.0.1:12143 0.0.0.0:0 LISTENING 2176 UDP 0.0.0.0:445 *:* 4 UDP 0.0.0.0:500 *:* 1036 UDP 0.0.0.0:1025 *:* 1436 UDP 0.0.0.0:1330 *:* 1436 UDP 0.0.0.0:1347 *:* 1436 UDP 0.0.0.0:1348 *:* 1436 UDP 0.0.0.0:4500 *:* 1036 UDP 82.249.178.80:123 *:* 1388 UDP 82.249.178.80:137 *:* 4 UDP 82.249.178.80:138 *:* 4 UDP 82.249.178.80:1900 *:* 1512 UDP 127.0.0.1:123 *:* 1388 UDP 127.0.0.1:1900 *:* 1512

Non, je ne vois pas de ralentissement de la machine ... Ce matin, AVAST ne couine plus. j'ai lancé BIBETA, qui n'a rien trouvé. Voilà le rapport 09/03/06 12:17:54 [info]: BlackLight Engine 1.0.46 initialized 09/03/06 12:17:54 [info]: OS: 5.1 build 2600 (Service Pack 2) 09/03/06 12:17:54 [Note]: 7019 4 09/03/06 12:17:54 [Note]: 7005 0 09/03/06 12:18:06 [Note]: 7006 0 09/03/06 12:18:06 [Note]: 7022 0 09/03/06 12:18:06 [Note]: 7011 648 09/03/06 12:18:06 [Note]: 7026 0 09/03/06 12:18:06 [Note]: 7026 0 09/03/06 12:18:06 [Note]: FSRAW library version 1.7.1019 09/03/06 12:25:29 [Note]: 7007 0 je le relance dès qu'avast re-rale ... merci alain

voilà le part 2 (bien posté cette fois= ========== Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 8271B718 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 8271B718 Device \Driver\00000046 \Device\0000005a IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys Device \Driver\00000046 \Device\0000005a IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys Device \Driver\00000046 \Device\0000005a IRP_MJ_PNP_POWER [F871B54E] sptd.sys Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83395788 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 8271B718 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 8273F350 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 8273F350 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 8271B968 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 8273E4F0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 8273EBF0 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DE3F0 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 82740AC8 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83395C78 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83395C78 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\dtscsi \Device\Scsi\dtscsi1 IRP_MJ_CREATE 82FAE410 Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE 830C1B80 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 82DDA430 ---- Modules - GMER 1.0.10 ---- Module _________ F8626000 ---- Registry - GMER 1.0.10 ---- Reg \Registry\MACHINE\SOFTWARE\Microsoft\Shared Tools\ ---- Files - GMER 1.0.10 ---- File C:\System Volume Information\MountPointManagerRemoteDatabase File C:\System Volume Information\tracking.log File C:\System Volume Information\_restore{33778183-F681-4128-A53B-FCFB9C341969} File D:\System Volume Information\MountPointManagerRemoteDatabase File D:\System Volume Information\tracking.log File D:\System Volume Information\_restore{33778183-F681-4128-A53B-FCFB9C341969} ---- EOF - GMER 1.0.10 ----

OK, je n'ai pas compris qu'il y avait une limite àla taille des posts. Voila un nouveau "GMER" coupé en deux GMER part 1 ======== GMER 1.0.10.10122 - http://www.gmer.net Rootkit 2006-09-02 19:35:44 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.10 ---- SSDT Vax347b.sys ZwClose SSDT Vax347b.sys ZwCreateKey SSDT Vax347b.sys ZwCreatePagingFile SSDT Vax347b.sys ZwEnumerateKey SSDT Vax347b.sys ZwEnumerateValueKey SSDT Vax347b.sys ZwOpenKey SSDT \??\C:\Program Files\systeme\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT Vax347b.sys ZwQueryKey SSDT Vax347b.sys ZwQueryValueKey SSDT Vax347b.sys ZwSetSystemPowerState SSDT sptd.sys ZwSetValueKey SSDT \??\C:\Program Files\systeme\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess ---- Devices - GMER 1.0.10 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 83395550 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 830C1B80 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 833950E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 833950E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 833950E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 833950E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 833DE3F0 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 833DE3F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP_POWER 82DA7800 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSEIRP_MJ_READ 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 82718350 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_PNP 8273E9B8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 GMER part 2 ======== Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 8271B718 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 8271B718 Device \Driver\00000046 \Device\0000005a IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys Device \Driver\00000046 \Device\0000005a IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys Device \Driver\00000046 \Device\0000005a IRP_MJ_PNP_POWER [F871B54E] sptd.sys Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83395788 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 8271B718 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 8273F350 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 8273F350 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 8271B968 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 8273E4F0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 8273EBF0 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DE3F0 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 82740AC8 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83395C78 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83395C78 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device

J'ai relancé GMER alors que AVAST n'arrête pas de râler ... GMER 1.0.10.10122 - http://www.gmer.net Rootkit 2006-09-02 13:13:25 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.10 ---- SSDT Vax347b.sys ZwClose SSDT Vax347b.sys ZwCreateKey SSDT Vax347b.sys ZwCreatePagingFile SSDT Vax347b.sys ZwEnumerateKey SSDT Vax347b.sys ZwEnumerateValueKey SSDT Vax347b.sys ZwOpenKey SSDT \??\C:\Program Files\systeme\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT Vax347b.sys ZwQueryKey SSDT Vax347b.sys ZwQueryValueKey SSDT Vax347b.sys ZwSetSystemPowerState SSDT sptd.sys ZwSetValueKey SSDT \??\C:\Program Files\systeme\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess ---- Devices - GMER 1.0.10 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 83395550 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 830C1B80 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 833950E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 833950E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 833950E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 833950E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 833DE3F0 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 833DE3F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP_POWER 82DA7800 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSEIRP_MJ_READ 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 82718350 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 8273E9B8 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_PNP 8273E9B8 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_NAMED_PIPE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLOSEIRP_MJ_READ 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_WRITE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_EA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FLUSH_BUFFERS 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_VOLUME_INFORMATION 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DIRECTORY_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SHUTDOWN 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_LOCK_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLEANUP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_MAILSLOT 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_SECURITY 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_POWER 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SYSTEM_CONTROL 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CHANGE 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_QUOTA 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP 82DA5438 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP_POWER 82DA5438 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82DA7800 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82DA7800 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 8271B718 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 8271B718 Device \Driver\00000046 \Device\0000005a IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys Device \Driver\00000046 \Device\0000005a IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys Device \Driver\00000046 \Device\0000005a IRP_MJ_PNP_POWER [F871B54E] sptd.sys Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83395788 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 8271B718 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 8273F350 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 8273F350 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 8271B968 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 8271B968 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 8273E4F0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 8273EBF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 8273EBF0 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DE3F0 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 82740AC8 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82DEA398 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83395C78 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83395C78 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 82DEA398 Device \Driver\Vax347s \Device\Scsi\Vax

ben à vrai dire, GMER s'est arrêté là ... je relance ?

voila le rapport diaghelp (option2) =============== FPort v2.0 - TCP/IP Process to Port Mapper Copyright 2000 by Foundstone, Inc. http://www.foundstone.com Pid Process Port Proto Path 3772 -> 1032 TCP 1284 -> 135 TCP 2300 DkService -> 31038 TCP C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\DkService.exe 2292 IEXPLORE -> 1516 TCP C:\WINDOWS\AppPatch\IEXPLORE.EXE 2652 StarWindService-> 3260 TCP C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 2652 StarWindService-> 3261 TCP C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 4 System -> 139 TCP 0 System -> 1572 TCP 0 System -> 1573 TCP 0 System -> 1574 TCP 4 System -> 445 TCP 1676 WCESCOMM -> 5679 TCP C:\Program Files\systeme\Microsoft ActiveSync\WCESCOMM.EXE 620 ashMaiSv -> 12025 TCP C:\Program Files\systeme\AVAST\Avast4\ashMaiSv.exe 620 ashMaiSv -> 12110 TCP C:\Program Files\systeme\AVAST\Avast4\ashMaiSv.exe 620 ashMaiSv -> 12119 TCP C:\Program Files\systeme\AVAST\Avast4\ashMaiSv.exe 620 ashMaiSv -> 12143 TCP C:\Program Files\systeme\AVAST\Avast4\ashMaiSv.exe 3888 ashWebSv -> 12080 TCP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 1541 TCP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 1550 TCP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 1557 TCP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 1559 TCP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 1571 TCP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3648 firefox -> 1462 TCP C:\Program Files\Mozilla Firefox\firefox.exe 3648 firefox -> 1463 TCP C:\Program Files\Mozilla Firefox\firefox.exe 3648 firefox -> 1540 TCP C:\Program Files\Mozilla Firefox\firefox.exe 3648 firefox -> 1548 TCP C:\Program Files\Mozilla Firefox\firefox.exe 3648 firefox -> 1554 TCP C:\Program Files\Mozilla Firefox\firefox.exe 3648 firefox -> 1556 TCP C:\Program Files\Mozilla Firefox\firefox.exe 3648 firefox -> 1558 TCP C:\Program Files\Mozilla Firefox\firefox.exe 1284 -> 445 UDP 2300 DkService -> 4500 UDP C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\DkService.exe 2292 IEXPLORE -> 1025 UDP C:\WINDOWS\AppPatch\IEXPLORE.EXE 2652 StarWindService-> 1235 UDP C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 2652 StarWindService-> 1284 UDP C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 4 System -> 123 UDP 4 System -> 500 UDP 3888 ashWebSv -> 123 UDP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 137 UDP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 138 UDP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe 3888 ashWebSv -> 1900 UDP C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe PsList 1.26 - Process Information Lister Copyright © 1999-2004 Mark Russinovich Sysinternals - www.sysinternals.com Process information for PC-ALAIN: Name Pid Pri Thd Hnd VM WS Priv Idle 0 0 1 0 0 16 0 System 4 8 169 2131 1904 916 0 smss 812 11 3 21 3828 904 892 csrss 940 13 16 587 28776 4676 2464 winlogon 964 13 25 469 55996 4084 8304 ati2evxx 388 8 3 43 16832 2488 1148 services 1012 9 15 326 36632 4604 2828 ashServ 496 13 25 290 88480 11656 14252 ashMaiSv 620 8 8 100 54040 920 3888 aswUpdSv 716 8 3 28 16732 216 1164 ati2evxx 1180 8 4 50 17368 2420 1144 svchost 1192 8 17 216 61480 5256 3768 btwdins 1212 8 4 51 32000 3348 2724 svchost 1284 8 11 280 35316 4524 2500 svchost 1376 8 71 1407 96296 22284 15812 svchost 1424 8 6 86 29844 3608 1928 svchost 1500 8 15 206 37440 4720 2400 spoolsv 1788 8 12 137 49920 7096 5748 DkService 2300 8 16 266 83928 18688 14328 guard 2328 8 8 56 53236 788 25164 gearsec 2376 8 2 28 11392 1604 972 PQV2iSvc 2428 8 7 220 83108 19960 16620 StarWindService 2652 8 3 55 11928 2512 1276 svchost 2732 8 6 118 36232 4416 3088 wdfmgr 2804 8 4 65 14836 2196 2224 alg 3772 8 6 105 32924 3860 1840 ashWebSv 3888 8 18 152 67972 4400 8808 lsass 1024 9 20 351 41388 1552 4432 explorer 460 8 18 487 85448 25844 17988 sstray 804 8 2 60 28484 3256 2532 atiptaxx 828 8 2 113 36812 4760 3676 ashDisp 912 8 7 85 45056 1428 3312 iTouch 928 8 2 65 36748 5244 3028 TMTMTSR 988 8 4 111 172764 6068 3816 CloneCDTray 1092 8 1 39 24696 2888 1388 BTTray 1136 8 3 72 43004 5356 4232 GhostTray 1224 8 8 173 56288 9260 5756 qttask 1356 8 2 46 26004 2724 1348 jusched 1436 8 1 24 18496 2472 1184 daemon 1452 8 2 65 30124 3824 1840 realsched 1568 8 5 110 36972 152 1676 ctfmon 1652 8 1 66 30024 3624 1600 wcescomm 1676 8 2 66 33180 3920 1780 WinCinemaMgr 1908 8 1 32 28180 3092 1484 gmer 2248 8 1 38 41216 1768 13224 cmd 3356 8 1 21 13824 2040 2204 pslist 3744 13 2 90 17788 2248 1508 firefox 3648 8 16 236 95560 36608 28280 EM_EXEC 1712 8 2 82 35444 4524 2140 IEXPLORE 2292 8 4 206 33096 5624 2776 ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ explorer.exe pid: 460 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x77ef0000 0x47000 5.01.2600.2818 C:\WINDOWS\system32\GDI32.dll 0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.dll 0x77f40000 0x76000 6.00.2900.2937 C:\WINDOWS\system32\SHLWAPI.dll 0x7c9d0000 0x823000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x75f10000 0xfd000 6.00.2900.2937 C:\WINDOWS\system32\BROWSEUI.dll 0x77720000 0x16f000 6.00.2900.2937 C:\WINDOWS\system32\SHDOCVW.dll 0x6fee0000 0x54000 5.01.2600.2952 C:\WINDOWS\system32\NETAPI32.dll 0x77aa0000 0xa7000 6.00.2900.2937 C:\WINDOWS\system32\WININET.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76920000 0x8000 5.01.2600.2751 C:\WINDOWS\system32\LINKINFO.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x01180000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x77170000 0xa0000 6.00.2900.2960 C:\WINDOWS\system32\urlmon.dll 0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x015b0000 0x1e000 1.01.0000.0000 C:\Program Files\Fichiers communs\Logitech\Scrolling\LgMsgHk.dll 0x10000000 0x7000 9.79.0025.0001 C:\Program Files\systeme\Logitech\MouseWare\System\LgWndHk.dll 0x00b00000 0x7000 1.00.0000.0000 C:\Program Files\systeme\Logitech\iTouch\iTchHk.dll 0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x76ed0000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x01c00000 0x13000 4.00.0000.0172 C:\Program Files\systeme\ewido anti-spyware 4.0\shellexecutehook.dll 0x00c90000 0xe000 7.00.0000.1333 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 0x7c340000 0x56000 7.10.3052.0004 C:\WINDOWS\system32\MSVCR71.dll 0x02110000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll 0x16200000 0x6000 4.01.0000.0000 C:\PROGRA~1\WinZip\WZSHLSTB.DLL 0x02310000 0x24000 C:\Program Files\WinRAR\rarext.dll 0x02340000 0x23000 4.32.0000.0000 C:\Program Files\WinZip\7-Zip\7-zip.dll 0x32520000 0x12000 10.00.2609.0000 C:\Program Files\Microsoft Office\Office10\msohev.dll 0x60980000 0x7000 3.01.4000.1823 C:\WINDOWS\system32\MSISIP.DLL 0x74e10000 0x10000 5.06.0000.8820 C:\WINDOWS\system32\wshext.dll 0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL 0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL 0x59000000 0xe000 5.06.0000.6626 C:\WINDOWS\system32\wshFR.DLL 0x365a0000 0x15000 10.00.2625.0000 C:\PROGRA~1\MICROS~2\Office10\MCPS.DLL ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ IEXPLORE.EXE pid: 2292 Command line: "C:\WINDOWS\AppPatch\IEXPLORE.EXE" Base Size Version Path 0x00400000 0xffffffff C:\WINDOWS\AppPatch\IEXPLORE.EXE 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.DLL 0x77ef0000 0x47000 5.01.2600.2818 C:\WINDOWS\system32\GDI32.dll 0x6fee0000 0x54000 5.01.2600.2952 C:\WINDOWS\system32\NETAPI32.dll 0x77f40000 0x76000 6.00.2900.2937 C:\WINDOWS\system32\SHLWAPI.dll 0x7c9d0000 0x823000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.DLL 0x77aa0000 0xa7000 6.00.2900.2937 C:\WINDOWS\system32\WININET.DLL 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77170000 0xa0000 6.00.2900.2960 C:\WINDOWS\system32\urlmon.dll 0x76ed0000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76f70000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 964 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x77680000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll 0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.2818 C:\WINDOWS\system32\GDI32.dll 0x6fee0000 0x54000 5.01.2600.2952 C:\WINDOWS\system32\NETAPI32.dll 0x7c9d0000 0x823000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f40000 0x76000 6.00.2900.2937 C:\WINDOWS\system32\SHLWAPI.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x10000000 0x17000 6.14.0010.4085 C:\WINDOWS\system32\Ati2evxx.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x012f0000 0xae000 1.05.0540.0000 C:\WINDOWS\system32\WgaLogon.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76d10000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x72c60000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ services.exe pid: 1012 Command line: C:\WINDOWS\system32\services.exe Base Size Version Path 0x7c800000 0x104000 5.01.2600.2945 C:\WINDOWS\system32\kernel32.dll 0x77d10000 0x90000 5.01.2600.2622 C:\WINDOWS\system32\USER32.dll 0x77ef0000 0x47000 5.01.2600.2818 C:\WINDOWS\system32\GDI32.dll 0x77680000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll 0x7dbc0000 0x21000 5.01.2600.2744 C:\WINDOWS\system32\umpnpmgr.dll 0x6fee0000 0x54000 5.01.2600.2952 C:\WINDOWS\system32\NETAPI32.dll 0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x774a0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x7c9d0000 0x823000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f40000 0x76000 6.00.2900.2937 C:\WINDOWS\system32\SHLWAPI.dll Le volume dans le lecteur C s'appelle SYSTEM Le num‚ro de s‚rie du volume est D0BD-8E31 R‚pertoire de C:\Program Files 01/09/2006 22:34 <REP> . 01/09/2006 22:34 <REP> .. 18/01/2006 23:00 <REP> 3D Home Architect 27/12/2005 13:06 <REP> Adobe 12/01/2006 23:16 <REP> Anuman Interactive 23/02/2006 16:16 <REP> ATI Technologies 22/01/2006 19:49 <REP> Bluebeam Software 14/12/2005 23:42 <REP> Common Files 12/12/2005 20:47 <REP> ComPlus Applications 17/12/2005 14:46 <REP> DEVELOP 28/04/2006 22:30 <REP> DWGeditor 29/05/2006 21:50 <REP> Fichiers communs 15/04/2006 12:11 <REP> Google 13/08/2006 22:54 <REP> Internet Explorer 20/01/2006 17:52 <REP> Java 12/12/2005 23:16 <REP> Messenger 25/06/2006 20:29 <REP> Microsoft ActiveSync 12/12/2005 20:50 <REP> microsoft frontpage 22/01/2006 19:49 <REP> Microsoft Office 13/01/2006 22:29 <REP> Microsoft Windows Script 12/04/2006 22:09 <REP> modelisme 12/12/2005 22:12 <REP> Movie Maker 02/09/2006 10:23 <REP> Mozilla Firefox 02/09/2006 09:41 <REP> Mozilla Thunderbird 12/12/2005 20:47 <REP> MSN Gaming Zone 27/08/2006 13:43 <REP> MULTIMEDIA 12/12/2005 22:10 <REP> NetMeeting 12/08/2006 15:52 <REP> Ontrack 13/04/2006 03:00 <REP> Outlook Express 27/06/2006 22:27 <REP> PDA 26/06/2006 19:47 <REP> Pocket Informant 19/03/2006 17:27 <REP> Port Explorer 29/05/2006 21:50 <REP> Real 25/06/2006 20:29 <REP> Resco 09/01/2006 23:01 <REP> ScanSoft 12/12/2005 21:35 <REP> Services en ligne 18/06/2006 14:19 <REP> SolidWorks 24/06/2006 20:42 <REP> Sudoku Solver 13/12/2005 23:16 <REP> Symantec 31/08/2006 22:07 <REP> systeme 19/02/2006 16:08 <REP> Windows Media Player 12/12/2005 22:10 <REP> Windows NT 15/02/2006 18:58 <REP> WinRAR 11/01/2006 22:01 <REP> WinZip 18/03/2006 10:52 <REP> X-Setup Pro 12/12/2005 20:50 <REP> xerox 0 fichier(s) 0 octets 46 R‚p(s) 15ÿ467ÿ020ÿ288 octets libres C:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\IDriver.exe C:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\IDriver2.exe C:\Documents and Settings\Adrien\Bureau\arkanoid.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\ARPPRODUCTICON.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\flatout.exe_853599CE1B5C4FEFB643B8F48F508EDC.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\flatout.exe1_853599CE1B5C4FEFB643B8F48F508EDC.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\NewShortcut4_3BC0D3BA5555412880F7D5DC0C3956DC.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\Uninstall_FlatOut_3BC0D3BA5555412880F7D5DC0C3956DC.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\ARPPRODUCTICON.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditor_D0220928AF1811D3AEA400C04F79FCDD.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditor1_C1A7EF455E1B4799AB173C52D9FB3A0E.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditorEnNo_D0220928AF1811D3AEA400C04F79FCDD.exe C:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditorEnNo1_C1A7EF455E1B4799AB173C52D9FB3A0E.exe C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\FlashGot.exe C:\Documents and Settings\Alain\Bureau\gmer.exe C:\Documents and Settings\Alain\Bureau\MenuShrink.exe C:\Documents and Settings\Alain\Bureau\scanner.exe C:\Documents and Settings\Alain\Bureau\clean\clean\pskill.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\FilesInfoCmd.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\Fport.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\grep.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\LFiles.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\LISTDLLS.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\pslist.exe C:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\streams.exe C:\Documents and Settings\Alain\Local Settings\Temp\generator.exe C:\Documents and Settings\eMule_Secure\Bureau\eMule0.47a-Installer.exe C:\Documents and Settings\Quentin\Bureau\ADIBOU.exe C:\Documents and Settings\Quentin\Bureau\QUENTIN_lit_‡a.exe C:\Documents and Settings\Quentin\Local Settings\Temp\setup_wm.exe C:\Documents and Settings\Vincent\Bureau\GoogleEarth-0762.exe

voila déjà GMER (à la fin une fenêtre s'est ouverte signaler quelquechose avec ROOTKIT. La ligne : Module \SystemRoot\system32\drivers\kmixer.sys (*** hidden *** ) B1700000 <-- ROOTKIT !!! s'affiche en rouge voila le rapport complet =============== GMER 1.0.10.10122 - http://www.gmer.net Rootkit 2006-09-02 10:23:15 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.10 ---- SSDT Vax347b.sys ZwClose SSDT Vax347b.sys ZwCreateKey SSDT Vax347b.sys ZwCreatePagingFile SSDT Vax347b.sys ZwEnumerateKey SSDT Vax347b.sys ZwEnumerateValueKey SSDT Vax347b.sys ZwOpenKey SSDT \??\C:\Program Files\systeme\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT Vax347b.sys ZwQueryKey SSDT Vax347b.sys ZwQueryValueKey SSDT Vax347b.sys ZwSetSystemPowerState SSDT sptd.sys ZwSetValueKey SSDT \??\C:\Program Files\systeme\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess ---- Devices - GMER 1.0.10 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 83394808 Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 827D1650 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 833DF398 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 833DF398 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 833DF650 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 833DF650 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSEIRP_MJ_READ 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82D9C008 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP_POWER 82D9C008 Device \Driver\00000047 \Device\00000059 IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys Device \Driver\00000047 \Device\00000059 IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys Device \Driver\00000047 \Device\00000059 IRP_MJ_PNP_POWER [F871B54E] sptd.sys Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSEIRP_MJ_READ 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 82728298 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 826D0508 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_PNP 826D0508 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSEIRP_MJ_READ 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82D9C008 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP_POWER 82D9C008 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSEIRP_MJ_READ 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 82DAF238 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSEIRP_MJ_READ 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 82DAF238 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSEIRP_MJ_READ 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSEIRP_MJ_READ 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_NAMED_PIPE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLOSEIRP_MJ_READ 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_WRITE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_EA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FLUSH_BUFFERS 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_VOLUME_INFORMATION 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DIRECTORY_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SHUTDOWN 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_LOCK_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLEANUP 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_MAILSLOT 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_SECURITY 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_POWER 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SYSTEM_CONTROL 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CHANGE 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_QUOTA 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP 82DAF238 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP_POWER 82DAF238 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82D9C008 Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82D9C008 Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82D9C008 Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82D9C008 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 8272B9E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 8272B9E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83394A40 Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 8272B9E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 827242D0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 827242D0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 82723AF0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 82723AF0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 828F8770 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 828F8770 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 828F8770 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 828C5E90 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 828F8770 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 828F8770 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 828F8770 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DF650 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 828F89A8 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82D68B58 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83394EB0 Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82D68B58 Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82D68B58 Device \Driver\Vax347s &

Bonjour, La procédure est en cours, voila déjà le rapport CLEAN.CMD et EVIDO. Je viens de relancer Kasperski, il trouvait toujours les traces dans les boîtes aux lettes de thunderbird. J'ai effectué une compression des BAL sous thunderbird car il s'agissait de vieux mails effacés. Après relance de Kasperski, il semble que ça passe sans découverte de fichiers infectés. La suite quand kasperski aura fini. Merci de ton aide précieuse ! Alain CLEAN.CMD ========== Script clean par Malekal_morte - http://www.malekal.com Microsoft Windows XP [version 5.1.2600] Script execute en mode sans echec *** Suppression de fichiers sur C: *** Suppression des fichiers dans C:\WINDOWS\ C:\WINDOWS\unvise32qt.exe FOUND *** Suppression des fichiers dans C:\WINDOWS\system32 "C:\Program Files\Internet\" FOUND *** Suppression des clefs du registre effectuee.. EVIDO : ====== --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 09:15:01 02/09/2006 + Scan result: :mozilla.626:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.627:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.628:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.629:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.630:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.631:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.632:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.633:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup (quarantined). :mozilla.227:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.45:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.46:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.496:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.49:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.50:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.51:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.52:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.53:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.54:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.55:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.56:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.57:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.58:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.59:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.60:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.61:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.62:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.63:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.64:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.65:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup (quarantined). :mozilla.258:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). :mozilla.259:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). :mozilla.260:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned with backup (quarantined). :mozilla.216:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined). :mozilla.217:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup (quarantined). :mozilla.505:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.506:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.507:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.508:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.509:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup (quarantined). :mozilla.256:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Adviva : Cleaned with backup (quarantined). :mozilla.354:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). C:\Documents and Settings\Vincent\Cookies\vincent@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup (quarantined). :mozilla.638:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup (quarantined). :mozilla.299:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.681:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned with backup (quarantined). :mozilla.537:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.538:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup (quarantined). :mozilla.431:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.432:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.433:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup (quarantined). :mozilla.839:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Casinotropez : Cleaned with backup (quarantined). :mozilla.42:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined). :mozilla.43:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup (quarantined). :mozilla.388:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Comclick : Cleaned with backup (quarantined). :mozilla.602:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned with backup (quarantined). :mozilla.47:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). C:\Documents and Settings\Vincent\Cookies\vincent@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned with backup (quarantined). :mozilla.159:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Estat : Cleaned with backup (quarantined). :mozilla.606:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup (quarantined). :mozilla.194:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). :mozilla.195:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). :mozilla.196:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). :mozilla.197:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). :mozilla.620:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup (quarantined). :mozilla.455:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup (quarantined). :mozilla.232:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.345:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.436:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.443:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup (quarantined). :mozilla.133:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.134:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.135:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.287:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.783:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup (quarantined). :mozilla.441:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned with backup (quarantined). :mozilla.248:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). :mozilla.249:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup (quarantined). :mozilla.39:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined). :mozilla.40:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined). :mozilla.41:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Onestat : Cleaned with backup (quarantined). :mozilla.82:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). :mozilla.88:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Overture : Cleaned with backup (quarantined). :mozilla.261:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.262:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.264:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.265:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.266:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup (quarantined). :mozilla.722:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). :mozilla.723:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup (quarantined). :mozilla.66:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.67:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.68:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.69:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.70:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup (quarantined). :mozilla.572:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup (quarantined). :mozilla.33:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). :mozilla.34:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). :mozilla.35:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). :mozilla.36:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). C:\Documents and Settings\Vincent\Cookies\vincent@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned with backup (quarantined). :mozilla.263:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.267:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.268:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.269:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.270:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.271:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.272:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.273:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.274:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.275:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup (quarantined). :mozilla.539:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). :mozilla.540:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup (quarantined). :mozilla.72:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.73:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.74:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.75:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.77:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.78:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.79:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.80:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.81:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.83:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.84:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.85:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.89:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.90:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup (quarantined). :mozilla.619:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Trafic : Cleaned with backup (quarantined). :mozilla.288:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup (quarantined). :mozilla.230:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined). :mozilla.231:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned with backup (quarantined). :mozilla.29:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). :mozilla.31:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). :mozilla.32:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Weborama : Cleaned with backup (quarantined). :mozilla.286:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup (quarantined). :mozilla.426:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Xhit : Cleaned with backup (quarantined). :mozilla.406:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Yadro : Cleaned with backup (quarantined). :mozilla.544:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup (quarantined). :mozilla.250:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). :mozilla.251:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). :mozilla.252:C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup (quarantined). ::Report end

OK merci pour le conseil Java, je vais faire ça. Par contre, oui, AVAST continue de râler de manière aléatoire. Lorsque l'ordinateur est rebouté, il ne se passe rien, mais quelqus heures après, j'ai des salves de messages "trop de mail ..." C'est quoi les virus de type Email-Worm.Win32.Bagle.fb que karperski trouve dans des mails que je n'ai plus accessibles sous thunderbird ? A+ Alain

voila le scan diag help : C:\WINDOWS\System32\wpa.dbl -->31/08/2006 19:23:59 C:\WINDOWS\System32\PerfStringBackup.INI -->31/08/2006 19:12:17 C:\WINDOWS\System32\perfh00C.dat -->31/08/2006 19:12:17 C:\WINDOWS\System32\perfh009.dat -->31/08/2006 19:12:17 C:\WINDOWS\System32\perfc00C.dat -->31/08/2006 19:12:17 C:\WINDOWS\System32\perfc009.dat -->31/08/2006 19:12:17 C:\WINDOWS\System32\ikhcore.log -->30/08/2006 22:18:34 C:\WINDOWS\System32\CONFIG.NT -->21/08/2006 15:54:48 C:\WINDOWS\System32\BASSMOD.dll -->13/08/2006 10:51:38 C:\WINDOWS\System32\MRT.exe -->09/08/2006 21:03:04 C:\WINDOWS\System32\aswBoot.exe -->08/08/2006 18:53:28 C:\WINDOWS\System32\AVASTSS.scr -->05/08/2006 08:18:08 C:\WINDOWS\System32\mshtml.dll -->28/07/2006 13:28:08 C:\WINDOWS\System32\inetcomm.dll -->27/07/2006 15:26:19 C:\WINDOWS\System32\urlmon.dll -->25/07/2006 22:41:01 C:\WINDOWS\System32\hlink.dll -->21/07/2006 10:27:28 C:\WINDOWS\System32\netapi32.dll -->14/07/2006 17:41:05 C:\WINDOWS\System32\hhctrl.ocx -->14/07/2006 17:27:53 C:\WINDOWS\System32\shell32.dll -->13/07/2006 15:36:01 C:\WINDOWS\System32\kernel32.dll -->05/07/2006 12:56:38 C:\WINDOWS\System32\rasadhlp.dll -->26/06/2006 19:41:32 C:\WINDOWS\System32\dnsapi.dll -->26/06/2006 19:41:32 C:\WINDOWS\System32\wininet.dll -->23/06/2006 13:11:45 C:\WINDOWS\System32\shlwapi.dll -->23/06/2006 13:11:45 C:\WINDOWS\System32\shdocvw.dll -->23/06/2006 13:11:45 C:\WINDOWS\setupapi.log -->31/08/2006 21:34:08 C:\WINDOWS\iTouch.ini -->31/08/2006 19:24:05 C:\WINDOWS\0.log -->31/08/2006 19:08:20 C:\WINDOWS\WindowsUpdate.log -->31/08/2006 19:08:13 C:\WINDOWS\wiadebug.log -->31/08/2006 19:08:11 C:\WINDOWS\wiaservc.log -->31/08/2006 19:08:10 C:\WINDOWS\bootstat.dat -->31/08/2006 19:07:14 C:\WINDOWS\f-mydoom.log -->30/08/2006 22:16:36 C:\WINDOWS\SchedLgU.Txt -->30/08/2006 20:45:13 C:\WINDOWS\wmsetup.log -->26/08/2006 12:06:47 C:\WINDOWS\NeroDigital.ini -->26/08/2006 12:06:02 C:\WINDOWS\WgaNotify.log -->25/08/2006 19:09:18 C:\WINDOWS\QTFont.qfn -->23/08/2006 22:27:24 C:\WINDOWS\QTFont.for -->21/08/2006 20:31:54 C:\WINDOWS\tsoc.log -->13/08/2006 22:54:55 C:\WINDOWS\RSetupCE.exe |25/06/2006 20:29:31 C:\WINDOWS\UninstallFirefox.exe |12/12/2005 23:10:03 C:\WINDOWS\UninstallThunderbird.exe |12/12/2005 23:10:26 C:\WINDOWS\_MSRSTRT.EXE |30/12/2005 20:11:52 C:\WINDOWS\libeay32.dll |24/03/2006 20:33:23 C:\WINDOWS\ssleay32.dll |24/03/2006 20:33:23 C:\WINDOWS\_000004_.tmp.dll |18/02/2006 11:55:14 C:\WINDOWS\_000005_.tmp.dll |18/02/2006 11:55:14 C:\WINDOWS\system32\append.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\aswBoot.exe |12/12/2005 22:22:39 C:\WINDOWS\system32\ati2evxx.exe |12/09/2003 16:33:38 C:\WINDOWS\system32\ati2sgag.exe |12/12/2005 21:20:03 C:\WINDOWS\system32\debug.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\directx.exe |19/06/2005 07:23:14 C:\WINDOWS\system32\dosx.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\dvdplay.exe |23/08/2001 19:47:34 C:\WINDOWS\system32\edlin.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\exe2bin.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\fastopen.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\mem.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\mscdexnt.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\nlsfunc.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\nw16.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\redir.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\setver.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\share.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\vwipxspx.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\amstream.dll |12/12/2005 21:20:34 C:\WINDOWS\system32\ati2evxx.dll |12/09/2003 16:35:06 C:\WINDOWS\system32\BASSMOD.dll |13/08/2006 10:51:38 C:\WINDOWS\system32\Bbgspdf.dll |09/12/2003 01:08:20 C:\WINDOWS\system32\btprn2k.dll |10/12/2004 12:19:56 C:\WINDOWS\system32\compatui.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\cpuinf32.dll |17/09/2001 14:20:02 C:\WINDOWS\system32\encdec.dll |12/12/2005 22:12:43 C:\WINDOWS\system32\ieencode.dll |12/12/2005 22:12:43 C:\WINDOWS\system32\InstallPrinter.dll |02/12/2003 14:39:08 C:\WINDOWS\system32\ir32_32.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\lcppn21.dll |14/11/2001 13:56:00 C:\WINDOWS\system32\libfaad.dll |16/04/2003 18:39:44 C:\WINDOWS\system32\msdmo.dll |12/12/2005 21:20:35 C:\WINDOWS\system32\msencode.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\ogg.dll |16/09/2003 18:41:44 C:\WINDOWS\system32\OpenQuicktimeLib.dll |16/04/2003 18:40:12 C:\WINDOWS\system32\paqsp.dll |23/08/2001 19:47:16 C:\WINDOWS\system32\psisdecd.dll |12/12/2005 21:20:36 C:\WINDOWS\system32\python23.dll |08/02/2005 17:23:10 C:\WINDOWS\system32\qedwipes.dll |12/12/2005 21:20:35 C:\WINDOWS\system32\sbe.dll |12/12/2005 22:12:40 C:\WINDOWS\system32\scriptpw.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\stlpmt45.dll |30/01/2003 07:04:00 C:\WINDOWS\system32\tsd32.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\unrar.dll |16/10/2002 00:54:04 C:\WINDOWS\system32\vidx16.dll |19/02/2006 16:08:27 C:\WINDOWS\system32\vorbis.dll |16/09/2003 18:52:30 C:\WINDOWS\system32\win87em.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\xvid.dll |14/05/2003 17:54:02 C:\WINDOWS\RSetupCE.exe |25/06/2006 20:29:31 C:\WINDOWS\UninstallFirefox.exe |12/12/2005 23:10:03 C:\WINDOWS\UninstallThunderbird.exe |12/12/2005 23:10:26 C:\WINDOWS\_MSRSTRT.EXE |30/12/2005 20:11:52 C:\WINDOWS\libeay32.dll |24/03/2006 20:33:23 C:\WINDOWS\ssleay32.dll |24/03/2006 20:33:23 C:\WINDOWS\_000004_.tmp.dll |18/02/2006 11:55:14 C:\WINDOWS\_000005_.tmp.dll |18/02/2006 11:55:14 C:\WINDOWS\system32\append.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\ati2evxx.exe |12/09/2003 16:33:38 C:\WINDOWS\system32\debug.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\directx.exe |19/06/2005 07:23:14 C:\WINDOWS\system32\dosx.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\edlin.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\exe2bin.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\fastopen.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\mem.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\mscdexnt.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\nlsfunc.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\nw16.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\redir.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\setver.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\share.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\vwipxspx.exe |28/08/2001 14:00:00 C:\WINDOWS\system32\amstream.dll |12/12/2005 21:20:34 C:\WINDOWS\system32\ati2evxx.dll |12/09/2003 16:35:06 C:\WINDOWS\system32\BASSMOD.dll |13/08/2006 10:51:38 C:\WINDOWS\system32\Bbgspdf.dll |09/12/2003 01:08:20 C:\WINDOWS\system32\btprn2k.dll |10/12/2004 12:19:56 C:\WINDOWS\system32\cpuinf32.dll |17/09/2001 14:20:02 C:\WINDOWS\system32\encdec.dll |12/12/2005 22:12:43 C:\WINDOWS\system32\ieencode.dll |12/12/2005 22:12:43 C:\WINDOWS\system32\InstallPrinter.dll |02/12/2003 14:39:08 C:\WINDOWS\system32\ir32_32.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\lcppn21.dll |14/11/2001 13:56:00 C:\WINDOWS\system32\libfaad.dll |16/04/2003 18:39:44 C:\WINDOWS\system32\msdmo.dll |12/12/2005 21:20:35 C:\WINDOWS\system32\msencode.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\ogg.dll |16/09/2003 18:41:44 C:\WINDOWS\system32\OpenQuicktimeLib.dll |16/04/2003 18:40:12 C:\WINDOWS\system32\psisdecd.dll |12/12/2005 21:20:36 C:\WINDOWS\system32\python23.dll |08/02/2005 17:23:10 C:\WINDOWS\system32\qedwipes.dll |12/12/2005 21:20:35 C:\WINDOWS\system32\sbe.dll |12/12/2005 22:12:40 C:\WINDOWS\system32\stlpmt45.dll |30/01/2003 07:04:00 C:\WINDOWS\system32\tsd32.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\unrar.dll |16/10/2002 00:54:04 C:\WINDOWS\system32\vidx16.dll |19/02/2006 16:08:27 C:\WINDOWS\system32\vorbis.dll |16/09/2003 18:52:30 C:\WINDOWS\system32\win87em.dll |28/08/2001 14:00:00 C:\WINDOWS\system32\xvid.dll |14/05/2003 17:54:02 Le volume dans le lecteur C s'appelle SYSTEM Le numéro de série du volume est D0BD-8E31 Répertoire de C:\WINDOWS\system32 19/08/2004 17:09 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 15 417 421 824 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle SYSTEM Le numéro de série du volume est D0BD-8E31 Répertoire de C:\WINDOWS\Downloaded Program Files 31/08/2006 21:34 <REP> . 31/08/2006 21:34 <REP> .. 12/12/2005 20:49 65 desktop.ini 25/07/2002 19:13 24 576 dwusplay.dll 25/07/2002 19:13 196 608 dwusplay.exe 09/08/2004 07:02 327 680 isusweb.dll 08/08/2006 11:45 576 kavwebscan.inf 5 fichier(s) 549 505 octets Total des fichiers listés : 5 fichier(s) 549 505 octets 2 Rép(s) 15 417 417 728 octets libres Liste des programmes installes V.3.00 on C 3D Home Architect Home Design Deluxe 6 3D Home Architect Home Design Deluxe 6 7-Zip 4.32 Ad-Aware SE Personal Adibou, Je lis, Je calcule 5-6 Adobe Bridge 1.0 Adobe Common File Installer Adobe Help Center 1.0 Adobe Photoshop CS2 Adobe Photoshop CS2 Adobe Reader 7.0 - Français Adobe Stock Photos 1.0 AeroFly Professional Deluxe ALShow ATI - Utilitaire de désinstallation du logiciel ATI Control Panel ATI Display Driver ATI HydraVision AutoIt v3.0.102 avast! Antivirus AviSynth 2.5 BreezeBrowser CalliGrapher CDisplay 1.8 CloneCD Colin McRae Rally 04 Commande ECHO désactivée. Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB885884 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB887742 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 CP avec Disney le Livre de la Jungle CSO-DAX COMPILATOR CureROM Pro 1.3.1 Diskeeper Professional Edition Dragon NaturallySpeaking 8 DU Meter DVD Shrink 3.2 DWGeditor eDrawings 2006 eMule Enregistreur vocal ScanSoft ewido anti-spyware 4.0 Extracteur d'Icônes FlatOut GOM Player Google Earth Google Toolbar for Internet Explorer Gordian Knot Rip Pack 0.35.0 HijackThis 1.99.1 Img2Ozf Version 3 InterVideo WinDVD J2SE Runtime Environment 5.0 Update 6 K-Lite Codec Pack 2.10 Full Kaspersky Online Scanner Les Chemins de la Lecture LiveUpdate 2.0 (Symantec Corporation) Logiciel iTouch de Logitech Logitech MouseWare 9.79.1 Macromedia Shockwave Player MailWasher Pro MicroRidge - ComTestSerial Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 Microsoft ActiveSync 3.8 Microsoft Office XP Professional avec FrontPage Microsoft Reader Microsoft Reader Text-to-Speech pour le français Microsoft Windows Script Host Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893066) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB896688) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899589) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB905915) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB908531) Mise à jour de sécurité pour Windows XP (KB911280) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911567) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912812) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB916281) Mise à jour de sécurité pour Windows XP (KB917159) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918439) Mise à jour de sécurité pour Windows XP (KB918899) Mise à jour de sécurité pour Windows XP (KB920214) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921883) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour pour Windows XP (KB894391) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB916595) Mozilla Firefox (1.5.0.5) Mozilla Firefox (1.5.0.6) Mozilla Thunderbird (1.5.0.5) Nero 6 Nero BurnRights NewsBin Pro V5 Norton Ghost 9.0 NVIDIA nForce Utilities OziExplorer 3.95 Pilotes NVIDIA nForce pour Windows 2000/XP Pocket Controller-Professional Pocket Informant Pro 2005 QuickPar 0.9 QuickTime RealPlayer reboot_freebox Resco Sudoku SciTe4Autoit3 05/18/2005 Security Update pour Microsoft .NET Framework 2.0 (KB917283) Sibelius 3 SnagIt 7 SolidWorks 2006 SP0 Spb Pocket Plus Spiral Mile Sudoku Rules! for ARMV4 (remove only) SSC Service Utility v4.00 The Panorama Factory V4 The Secrets of Da Vinci Thrustmapper Tweak UI VobSub v2.23 (Remove Only) Vorwerk&Stengel RealCalculator WebFldrs XP WIDCOMM Bluetooth Software Windows Genuine Advantage Notifications (KB905474) Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows Media Player 10 Windows XP Service Pack 2 WinRAR archiver WinZip WisBar Advance 2 Language Preview 3 Worms 4 Mayhem Le volume dans le lecteur C s'appelle SYSTEM Le numéro de série du volume est D0BD-8E31 Répertoire de C:\Program Files 30/08/2006 22:53 <REP> . 30/08/2006 22:53 <REP> .. 18/01/2006 23:00 <REP> 3D Home Architect 27/12/2005 13:06 <REP> Adobe 12/01/2006 23:16 <REP> Anuman Interactive 23/02/2006 16:16 <REP> ATI Technologies 22/01/2006 19:49 <REP> Bluebeam Software 14/12/2005 23:42 <REP> Common Files 12/12/2005 20:47 <REP> ComPlus Applications 17/12/2005 14:46 <REP> DEVELOP 28/04/2006 22:30 <REP> DWGeditor 29/05/2006 21:50 <REP> Fichiers communs 15/04/2006 12:11 <REP> Google 03/06/2006 11:59 <REP> INTERNET 13/08/2006 22:54 <REP> Internet Explorer 20/01/2006 17:52 <REP> Java 12/12/2005 23:16 <REP> Messenger 25/06/2006 20:29 <REP> Microsoft ActiveSync 12/12/2005 20:50 <REP> microsoft frontpage 22/01/2006 19:49 <REP> Microsoft Office 13/01/2006 22:29 <REP> Microsoft Windows Script 12/04/2006 22:09 <REP> modelisme 12/12/2005 22:12 <REP> Movie Maker 01/09/2006 07:57 <REP> Mozilla Firefox 01/09/2006 07:57 <REP> Mozilla Thunderbird 12/12/2005 20:47 <REP> MSN Gaming Zone 27/08/2006 13:43 <REP> MULTIMEDIA 12/12/2005 22:10 <REP> NetMeeting 12/08/2006 15:52 <REP> Ontrack 13/04/2006 03:00 <REP> Outlook Express 27/06/2006 22:27 <REP> PDA 26/06/2006 19:47 <REP> Pocket Informant 19/03/2006 17:27 <REP> Port Explorer 29/05/2006 21:50 <REP> Real 25/06/2006 20:29 <REP> Resco 09/01/2006 23:01 <REP> ScanSoft 12/12/2005 21:35 <REP> Services en ligne 18/06/2006 14:19 <REP> SolidWorks 24/06/2006 20:42 <REP> Sudoku Solver 13/12/2005 23:16 <REP> Symantec 31/08/2006 22:07 <REP> systeme 19/02/2006 16:08 <REP> Windows Media Player 12/12/2005 22:10 <REP> Windows NT 15/02/2006 18:58 <REP> WinRAR 11/01/2006 22:01 <REP> WinZip 18/03/2006 10:52 <REP> X-Setup Pro 12/12/2005 20:50 <REP> xerox 0 fichier(s) 0 octets 47 Rép(s) 15 417 384 960 octets libres Le volume dans le lecteur C s'appelle SYSTEM Le numéro de série du volume est D0BD-8E31 Répertoire de C:\Program Files\fichiers communs 29/05/2006 21:50 <REP> . 29/05/2006 21:50 <REP> .. 13/12/2005 20:14 <REP> Adobe 13/12/2005 20:13 <REP> Adobe Systems Shared 13/12/2005 22:49 <REP> Ahead 22/01/2006 19:49 <REP> Bluebeam Software 16/01/2006 22:23 <REP> Borland Shared 22/01/2006 19:49 <REP> Designer 22/01/2006 19:53 <REP> eDrawings2006 08/01/2006 20:38 <REP> InstallShield 20/01/2006 17:51 <REP> Java 05/03/2006 16:13 <REP> L&H 12/12/2005 22:57 <REP> Logitech 12/05/2006 20:58 <REP> Microsoft Shared 12/12/2005 20:48 <REP> MSSoap 12/12/2005 20:44 <REP> ODBC 29/05/2006 21:50 <REP> Real 08/01/2006 20:38 <REP> Scansoft Shared 12/12/2005 20:48 <REP> Services 22/01/2006 19:43 <REP> Solidworks Data 22/01/2006 19:52 <REP> SolidWorks Shared 12/12/2005 20:44 <REP> SpeechEngines 13/12/2005 23:16 <REP> Symantec Shared 13/04/2006 03:00 <REP> System 29/05/2006 21:50 <REP> xing shared 0 fichier(s) 0 octets 25 Rép(s) 15 417 384 960 octets libres Le volume dans le lecteur C s'appelle SYSTEM Le numéro de série du volume est D0BD-8E31 Répertoire de C:\Program Files\common files 14/12/2005 23:42 <REP> . 14/12/2005 23:42 <REP> .. 14/12/2005 23:42 <REP> Microsoft Shared 0 fichier(s) 0 octets 3 Rép(s) 15 417 372 672 octets libres c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\IDriver.exe c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\IDriver2.exe c:\Documents and Settings\Adrien\Bureau\arkanoid.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\ARPPRODUCTICON.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\flatout.exe_853599CE1B5C4FEFB643B8F48F508EDC.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\flatout.exe1_853599CE1B5C4FEFB643B8F48F508EDC.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\NewShortcut4_3BC0D3BA5555412880F7D5DC0C3956DC.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{A57D86AF-DE8E-4B26-972E-A1A28FFF7742}\Uninstall_FlatOut_3BC0D3BA5555412880F7D5DC0C3956DC.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\ARPPRODUCTICON.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditor_D0220928AF1811D3AEA400C04F79FCDD.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditor1_C1A7EF455E1B4799AB173C52D9FB3A0E.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditorEnNo_D0220928AF1811D3AEA400C04F79FCDD.exe c:\Documents and Settings\Alain\Application Data\Microsoft\Installer\{AC7190A0-EEA1-423C-A531-FCEB4E0EBBB1}\DWGEditorEnNo1_C1A7EF455E1B4799AB173C52D9FB3A0E.exe c:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\FlashGot.exe c:\Documents and Settings\Alain\Bureau\ewido-setup_4.0.0.172a.exe c:\Documents and Settings\Alain\Bureau\MenuShrink.exe c:\Documents and Settings\Alain\Bureau\scanner.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\FilesInfoCmd.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\Fport.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\grep.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\LFiles.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\LISTDLLS.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\pslist.exe c:\Documents and Settings\Alain\Bureau\DiagHelp\diaghelp\streams.exe c:\Documents and Settings\Alain\Bureau\pdx-pom3\ppf-o-matic3.exe c:\Documents and Settings\Alain\Local Settings\Temp\generator.exe c:\Documents and Settings\eMule_Secure\Bureau\eMule0.47a-Installer.exe c:\Documents and Settings\Quentin\Bureau\ADIBOU.exe c:\Documents and Settings\Quentin\Bureau\QUENTIN_lit_ça.exe c:\Documents and Settings\Quentin\Local Settings\Temp\setup_wm.exe c:\Documents and Settings\Vincent\Bureau\GoogleEarth-0762.exe c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\_ISRES1033.dll c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\iGdiCnv.dll c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\IScrCnv.dll c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\ISRT.dll c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\IUserCnv.dll c:\Documents and Settings\Adrien\Application Data\InstallShield\Driver\9\Intel 32\objpscnv.dll merci Alain

Dans la nuit, j'ai fait un scan complet avec karperski ==> pas top ... voila le rapport : ------------------------------------------------------------------------------- KASPERSKY ON-LINE SCANNER REPORT Friday, September 01, 2006 7:23:43 AM Système d'exploitation : Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version : 5.0.83.0 Dernière mise à jour de la base antivirus Kaspersky : 1/09/2006 Enregistrements dans la base antivirus Kaspersky : 206950 ------------------------------------------------------------------------------- Paramètres d'analyse: Analyser avec la base antivirus suivante: standard Analyser les archives: vrai Analyser les bases de messagerie: vrai Cible de l'analyse - Poste de travail: A:\ C:\ D:\ E:\ F:\ G:\ H:\ I:\ Statistiques de l'analyse: Total d'objets analysés: 97891 Nombre de virus trouvés: 1 Nombre d'objets infectés: 10 / 0 Nombre d'objets suspects: 0 Durée de l'analyse: 01:31:56 Nom de l'objet infecté / Nom du virus / Dernière action C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\cert8.db L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\flashgot.log L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\formhistory.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\history.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\key3.db L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\parent.lock L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Inbox/[From Roberto Rossi <ice_lord_2001@yahoo.it>][Date Fri, 16 Dec 2005 18:31:46 +0100 (CET)]/text/[From freedom2000 <frexxxx@free.fr>][Date Sun, 18 Dec 2005 19:10:03 +0100]/text/[From "Fabien GRENOL" <grenol.fabien@wanadoo.fr>][Date Mon, 19 Dec 2005 23:30:05 +0100]/UNNAMED/[From "Aeropibiza" <aeropibiza@grupo-centauro.com>][Date Tue, 20 Dec 2005 18:30:19 -0300]/Henry.zip/S3700026.exe Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Inbox/[From Roberto Rossi <ice_lord_2001@yahoo.it>][Date Fri, 16 Dec 2005 18:31:46 +0100 (CET)]/text/[From freedom2000 <frexxxx@free.fr>][Date Sun, 18 Dec 2005 19:10:03 +0100]/text/[From "Fabien GRENOL" <grenol.fabien@wanadoo.fr>][Date Mon, 19 Dec 2005 23:30:05 +0100]/UNNAMED/[From "Aeropibiza" <aeropibiza@grupo-centauro.com>][Date Tue, 20 Dec 2005 18:30:19 -0300]/Henry.zip Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Inbox/[From Roberto Rossi <ice_lord_2001@yahoo.it>][Date Fri, 16 Dec 2005 18:31:46 +0100 (CET)]/text/[From freedom2000 <frexxxxx@free.fr>][Date Sun, 18 Dec 2005 19:10:03 +0100]/text/[From "Fabien GRENOL" <grenol.fabien@wanadoo.fr>][Date Mon, 19 Dec 2005 23:30:05 +0100]/UNNAMED Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Inbox/[From Roberto Rossi <ice_lord_2001@yahoo.it>][Date Fri, 16 Dec 2005 18:31:46 +0100 (CET)]/text/[From freedom2000 <frexxxxx@free.fr>][Date Sun, 18 Dec 2005 19:10:03 +0100]/text Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Inbox/[From Roberto Rossi <ice_lord_2001@yahoo.it>][Date Fri, 16 Dec 2005 18:31:46 +0100 (CET)]/text Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Inbox Mail Berkeley mbox: infecté - 5 ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Trash/[From mam <mam@free.fr>][Date Sun, 18 Dec 2005 11:38:43 +0100]/text/[From freedom2000 <freexxxx@free.fr>][Date Sun, 18 Dec 2005 19:10:03 +0100]/Henry.zip/S3700026.exe Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Trash/[From mam <mam@free.fr>][Date Sun, 18 Dec 2005 11:38:43 +0100]/text/[From freedom2000 <frexxxx@free.fr>][Date Sun, 18 Dec 2005 19:10:03 +0100]/Henry.zip Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Trash/[From mam <mam@free.fr>][Date Sun, 18 Dec 2005 11:38:43 +0100]/text Infecté : Email-Worm.Win32.Bagle.fb ignoré C:\Documents and Settings\Alain\Application Data\Thunderbird\Profiles\k5dcf5g3.default\Mail\Local Folders\Trash Mail Berkeley mbox: infecté - 3 ignoré C:\Documents and Settings\Alain\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\Cache\_CACHE_001_ L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\Cache\_CACHE_002_ L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\Cache\_CACHE_003_ L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Application Data\Mozilla\Firefox\Profiles\cbva4j9y.default\Cache\_CACHE_MAP_ L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Historique\History.IE5\MSHist012006090120060902\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Temp\~DF8C98.tmp L'objet est verrouillé ignoré C:\Documents and Settings\Alain\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\ntuser.dat L'objet est verrouillé ignoré C:\Documents and Settings\Alain\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\ntuser.dat L'objet est verrouillé ignoré C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\ntuser.dat L'objet est verrouillé ignoré C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré C:\itouch_crash_info.txt L'objet est verrouillé ignoré C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2006-08-31.19-08-04.log L'objet est verrouillé ignoré C:\Program Files\systeme\AVAST\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré C:\Program Files\systeme\AVAST\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré C:\Program Files\systeme\AVAST\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré C:\System Volume Information\_restore{33778183-F681-4128-A53B-FCFB9C341969}\RP258\change.log L'objet est verrouillé ignoré C:\WINDOWS\$_hpcst$.hpc L'objet est verrouillé ignoré C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\Default L'objet est verrouillé ignoré C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\Security L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\Software L'objet est verrouillé ignoré C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré C:\WINDOWS\system32\config\System L'objet est verrouillé ignoré C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\dtscsi.sys L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré C:\WINDOWS\system32\drivers\sptd5309.sys L'objet est verrouillé ignoré C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré C:\WINDOWS\Temp\Perflib_Perfdata_4fc.dat L'objet est verrouillé ignoré C:\WINDOWS\Temp\Perflib_Perfdata_9dc.dat L'objet est verrouillé ignoré C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré D:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré D:\System Volume Information\_restore{33778183-F681-4128-A53B-FCFB9C341969}\RP258\change.log L'objet est verrouillé ignoré Analyse terminée.

bon finalement, il a été lent sur le début et boosté sur la fin ... Voila le rapport : ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Thursday, August 31, 2006 10:43:56 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 31/08/2006 Kaspersky Anti-Virus database records: 206935 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: standard Scan Archives: true Scan Mail Bases: true Scan Target - Critical Areas: C:\WINDOWS C:\DOCUME~1\Alain\LOCALS~1\Temp\ Scan Statistics: Total number of scanned objects: 14270 Number of viruses found: 0 Number of infected objects: 0 / 0 Number of suspicious objects: 0 Duration of the scan process: 00:09:27 Infected Object Name / Virus Name / Last Action C:\WINDOWS\$_hpcst$.hpc Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\Default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\Security Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\Software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\System Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped C:\WINDOWS\system32\drivers\sptd5309.sys Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\Perflib_Perfdata_4fc.dat Object is locked skipped C:\WINDOWS\Temp\Perflib_Perfdata_9dc.dat Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped C:\DOCUME~1\Alain\LOCALS~1\Temp\~DF8C98.tmp Object is locked skipped Scan process completed. Alors docteur ?

Merci pour cette réponse rapide ! J'ai désactivé google, remis IE en bon état, arrêté Avast, lancé Karperski, je poste le résultat du scan demain matin (j'en suis à 5%) A+ Alain

Bonjour, Il semble que j'ai le même problème que dartkhkiller ... Avast me signale de manière aléatoire que j'envoie trop de mails portant sur le même sujet : n'aurais je pas attrapé un trojan ? J'ai démarré la procédure préconisée (voir scan hijackthis) mais je n'ai pas la même signature : Merci de m'aider Alain rapport scan : Logfile of HijackThis v1.99.1 Scan saved at 21:43:49, on 31/08/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\systeme\AVAST\Avast4\aswUpdSv.exe C:\Program Files\systeme\AVAST\Avast4\ashServ.exe C:\Program Files\systeme\Logiciel Bluetooth\bin\btwdins.exe C:\WINDOWS\SoftwareDistribution\IEXPLORE.EXE C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\DkService.exe C:\WINDOWS\System32\GEARSec.exe C:\Program Files\systeme\Symantec\Norton Ghost\Agent\PQV2iSvc.exe C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\systeme\AVAST\Avast4\ashMaiSv.exe C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\sstray.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\PROGRA~1\systeme\AVAST\Avast4\ashDisp.exe C:\Program Files\systeme\Logitech\iTouch\iTouch.exe C:\JEUX\Thrustmaster\Thrustmapper\TMTMTSR.exe C:\Program Files\systeme\SlySoft\CloneCD\CloneCDTray.exe C:\Program Files\systeme\Symantec\Norton Ghost\Agent\GhostTray.exe C:\Program Files\systeme\Logitech\MouseWare\system\em_exec.exe C:\Program Files\INTERNET\DU Meter\DUMeter.exe C:\Program Files\MULTIMEDIA\QuickTime\qttask.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\Program Files\systeme\DAEMON Tools\daemon.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\systeme\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\systeme\Logiciel Bluetooth\BTTray.exe C:\Program Files\MULTIMEDIA\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\Alain\Bureau\scanner.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\systeme\AVAST\Avast4\ashDisp.exe O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\systeme\Logitech\iTouch\iTouch.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [ThrustTSR] C:\JEUX\Thrustmaster\Thrustmapper\TMTMTSR.exe O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\systeme\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\systeme\Symantec\Norton Ghost\Agent\GhostTray.exe O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\DkIcon.exe" O4 - HKLM\..\Run: [DU Meter] C:\Program Files\INTERNET\DU Meter\DUMeter.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\MULTIMEDIA\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [sSBkgdUpdate] C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\systeme\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\systeme\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [NBJ] "C:\Program Files\systeme\NERO-Ahead\Nero BackItUp\NBJ.exe" O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: Diskeeper 10 Professional Edition Registration.lnk = C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\ESIRegister.exe O4 - Startup: Undelete 5.0 Registration.lnk = C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\ESIRegister.exe O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\MULTIMEDIA\InterVideo\Common\Bin\WinCinemaMgr.exe O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Add all items to the auction list - res://C:\Program Files\INTERNET\RKD\AuctionNavigator\BidCtxtClick.dll/202 O8 - Extra context menu item: Add this item to the auction list - res://C:\Program Files\INTERNET\RKD\AuctionNavigator\BidCtxtClick.dll/201 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Envoyer à &Bluetooth - C:\Program Files\systeme\Logiciel Bluetooth\btsendto_ie_ctx.htm O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\systeme\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\systeme\Microsoft ActiveSync\inetrepl.dll O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\systeme\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\systeme\Logiciel Bluetooth\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\systeme\Logiciel Bluetooth\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab O18 - Protocol: widimg - {EE7C2AFF-5742-44FF-BD0E-E521B0D3C3BA} - C:\WINDOWS\system32\btxppanel.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\systeme\AVAST\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\systeme\AVAST\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\systeme\AVAST\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\systeme\AVAST\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\systeme\Logiciel Bluetooth\bin\btwdins.exe O23 - Service: DirectX Service (DirectBuvv) - Unknown owner - c:\windows\system32\directx.exe O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\systeme\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\systeme\Symantec\Norton Ghost\Agent\PQV2iSvc.exe O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\systeme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe