problème AVAST trop de mails identiques

aeropic · le 3 septembre 2006

J'ai désinstazllé AVAST, puis je l'ai reinstallé

J'ai laissé toutner le PC 2 ou 3 heures sans rien d'actif

AU bout de trois heures, AVAST a de nouveau râlé

J'ai lancé rootkitrevealer et obtenu un log équivalent à une ligne près

HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed ...

J'avoue être un peu démoralisé malgrès ton aide précieuse !

Voila le log

=======

HKLM\S-1-5-21-1547161642-854245398-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{95402B42-15DE-DDB2-C63E-BCC04F0E2316}* 12/08/2006 16:12 0 bytes Key name contains embedded nulls (*)

HKLM\SOFTWARE\Classes\Installer\Products\32418F9EE1126B64A90E8365B85CFCF6\ProductName 30/12/2005 23:51 26 bytes Data mismatch between Windows API and raw hive data.

HKLM\SOFTWARE\Hagel\DU Meter\Totals 03/09/2006 20:50 80 bytes Data mismatch between Windows API and raw hive data.

HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 03/09/2006 20:51 80 bytes Data mismatch between Windows API and raw hive data.

HKLM\SOFTWARE\Microsoft\Shared Tools\ 24/12/2005 13:23 0 bytes Key name contains embedded nulls (*)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E9F81423-211E-46B6-9AE0-38568BC5CF6F}\DisplayName 30/12/2005 23:54 26 bytes Data mismatch between Windows API and raw hive data.

HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s0 09/04/2006 11:04 4 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s1 09/04/2006 11:04 4 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\s2 09/04/2006 11:04 4 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\g0 09/04/2006 11:04 32 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\h0 09/04/2006 11:04 4 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 09/04/2006 11:05 0 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\Vax347s\Config\jdgg40 03/09/2006 19:44 0 bytes Hidden from Windows API.

HKLM\SYSTEM\ControlSet006\Services\Vax347s\Config\jdgg41 03/09/2006 19:44 0 bytes Hidden from Windows API.

C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll 13/07/2006 23:10 252.00 KB Visible in Windows API, but not in MFT or directory index.

C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll 13/07/2006 23:10 111.50 KB Visible in Windows API, but not in MFT or directory index.

aeropic · le 3 septembre 2006

j'ai refait un gmer à tout hazard :

GMER 1.0.10.10122 - http://www.gmer.net

Rootkit 2006-09-03 21:20:25

Windows 5.1.2600 Service Pack 2

---- System - GMER 1.0.10 ----

SSDT Vax347b.sys ZwClose

SSDT Vax347b.sys ZwCreateKey

SSDT Vax347b.sys ZwCreatePagingFile

SSDT Vax347b.sys ZwEnumerateKey

SSDT Vax347b.sys ZwEnumerateValueKey

SSDT Vax347b.sys ZwOpenKey

SSDT Vax347b.sys ZwQueryKey

SSDT Vax347b.sys ZwQueryValueKey

SSDT Vax347b.sys ZwSetSystemPowerState

SSDT sptd.sys ZwSetValueKey

---- Devices - GMER 1.0.10 ----

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 83394808

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 82DC6CB0

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 833DF398

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 833DF398

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 833DF398

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 833DF398

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 833DF650

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 833DF650

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP_POWER 82ECC7B0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSEIRP_MJ_READ 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 82D37F08

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 82F289C0

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_PNP 82F289C0

Device \Driver\00000046 \Device\00000059 IRP_MJ_SYSTEM_CONTROL [F870EA26] sptd.sys

Device \Driver\00000046 \Device\00000059 IRP_MJ_DEVICE_CHANGE [F8722BD8] sptd.sys

Device \Driver\00000046 \Device\00000059 IRP_MJ_PNP_POWER [F871B54E] sptd.sys

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP_POWER 82ECC7B0

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 82E5D698

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 82E5D698

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSEIRP_MJ_READ 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_NAMED_PIPE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLOSEIRP_MJ_READ 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_WRITE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_EA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FLUSH_BUFFERS 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_VOLUME_INFORMATION 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DIRECTORY_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SHUTDOWN 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_LOCK_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CLEANUP 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_CREATE_MAILSLOT 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_SECURITY 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_POWER 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SYSTEM_CONTROL 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_DEVICE_CHANGE 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_QUERY_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_SET_QUOTA 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP 82E5D698

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_PNP_POWER 82E5D698

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82ECC7B0

GMER suite

=======

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSEIRP_MJ_READ 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP 82ECC7B0

Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP_POWER 82ECC7B0

Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 82C083B0

Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 82C083B0

Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 83394A40

Device \Driver\NetBT \Device\NetBT_Tcpip_{AAFB262D-301D-4F27-B916-6F9C26E5DD1D} IRP_MJ_CREATE 82C083B0

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 82D1C470

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 82C45810

Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP_POWER 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 82D1C470

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 82C45810

Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP_POWER 82C45810

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 82C10898

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 82C10898

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSEIRP_MJ_READ 82C10898

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 82DE4418

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 82C10898

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 82C10898

Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_EA 82C10898

Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 833DF650

Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 82E76980

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_NAMED_PIPE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLOSEIRP_MJ_READ 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_WRITE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_EA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_EA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FLUSH_BUFFERS 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_VOLUME_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_VOLUME_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DIRECTORY_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_FILE_SYSTEM_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SHUTDOWN 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_LOCK_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CLEANUP 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_CREATE_MAILSLOT 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_SECURITY 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_SECURITY 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_POWER 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SYSTEM_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_DEVICE_CHANGE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_QUERY_QUOTA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_SET_QUOTA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1 IRP_MJ_PNP_POWER 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_WRITE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_EA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_EA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SHUTDOWN 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_LOCK_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CLEANUP 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_SECURITY 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_SECURITY 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_POWER 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_QUERY_QUOTA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_SET_QUOTA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target1Lun0 IRP_MJ_PNP_POWER 82CD9338

Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_CREATE 83394EB0

Device \Driver\si3112r \Device\Scsi\si3112r1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys

Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_CREATE 83394EB0

Device \Driver\si3112r \Device\Scsi\si3112r1 IRP_MJ_SHUTDOWN [F8A86D60] sfsync02.sys

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLOSEIRP_MJ_READ 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_WRITE 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_EA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_EA 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SHUTDOWN 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CLEANUP 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_QUERY_SECURITY 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Target0Lun0 IRP_MJ_SET_SECURITY 82CD9338

Device \Driver\Vax347s \Device\Scsi\Vax347s1Port3Path0Tar

Malekal_morte · le 3 septembre 2006

il manque la fin :/

aeropic · le 3 septembre 2006

Je me suis encore fait avoir ... j'ai jeté le log

==> a refaire demain !

Malekal_morte · le 3 septembre 2006

Avant de faire le scan avec Gmer

Renomme le fichier en coincoin.exe

aeropic · le 4 septembre 2006

voila le résultat de coincoin.exe

AVAST a râlé ce matin, mais ce soir il ne se passe rien ...

part 1

====