Komp zwalnia.... wirus... logi

[mister12_1994 (Mister13 1994)]

GMER 1.0.12.12244 - http://www.gmer.net Rootkit scan 2007-05-14 19:46:09 Windows 5.1.2600 ---- System - GMER 1.0.12 ---- SSDT sptd.sys ZwCreateKey SSDT sptd.sys ZwEnumerateKey SSDT sptd.sys ZwEnumerateValueKey SSDT sptd.sys ZwOpenKey SSDT sptd.sys ZwQueryKey SSDT sptd.sys ZwQueryValueKey SSDT sptd.sys ZwSetValueKey ---- Kernel code sections - GMER 1.0.12 ---- .text ntoskrnl.exe!KeInitializeInterrupt + B79 804D4F8E 1 Byte [06] .text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 1B0 804FC6C8 4 Bytes [D0, 80, 15, F9] .text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 228 804FC740 4 Bytes [2C, DE, 15, F9] .text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 230 804FC748 4 Bytes [BA, E1, 15, F9] .text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 2E8 804FC800 4 Bytes [B0, 80, 15, F9] .text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 38C 804FC8A4 4 Bytes [92, E2, 15, F9] .text … ? C:\WINDOWS\system32\drivers\sptd.sys Proces nie może uzyskać dostępu do pliku, ponieważ jest on używany przez inny proces. ? rsjevbew.sys Nie można odnaleźć określonego pliku. ? System32\Drivers\aodkfu41.SYS Nie można odnaleźć określonego pliku. ---- Devices - GMER 1.0.12 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 80F5E1E8 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 80F5E1E8 Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_CREATE [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_CREATE_NAMED_PIPE [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_CLOSE [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_READ [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_WRITE [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_QUERY_INFORMATION [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SET_INFORMATION [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_QUERY_EA [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SET_EA [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_FLUSH_BUFFERS [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_QUERY_VOLUME_INFORMATION [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SET_VOLUME_INFORMATION [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_DIRECTORY_CONTROL [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_FILE_SYSTEM_CONTROL [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_DEVICE_CONTROL [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_INTERNAL_DEVICE_CONTROL [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SHUTDOWN [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_LOCK_CONTROL [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_CLEANUP [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_CREATE_MAILSLOT [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_QUERY_SECURITY [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SET_SECURITY [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_POWER [F9167712] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SYSTEM_CONTROL [F918A2C8] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_DEVICE_CHANGE [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_QUERY_QUOTA [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_SET_QUOTA [F918DAD2] sptd.sys Device \Driver\PCI_NTPNP9664 \Device\00000041 IRP_MJ_PNP [F918B238] sptd.sys Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP FFB4B1E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 80EF31E8 Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 80EF31E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CREATE FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_CLOSE FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_POWER FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-2 IRP_MJ_PNP FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CREATE FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CLOSE FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_POWER FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_PNP FFB4B1E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 80F601E8 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ FFB48120 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 80DC7388 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL FFA957A0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP FFA957A0 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 80F601E8 Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA50100 Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA50100 Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA50100 Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL FFA50100 Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA50100 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ FFB48120 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 80DC7388 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL FFA957A0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP FFA957A0 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CREATE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_READ 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_WRITE 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_FLUSH_BUFFERS 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_INTERNAL_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SHUTDOWN 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CLEANUP 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_POWER 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SYSTEM_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_PNP 80F601E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE FF3A31E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE FF3A31E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL FF3A31E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL FF3A31E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP FF3A31E8 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP FF3A31E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE FF3A31E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE FF3A31E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL FF3A31E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL FF3A31E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP FF3A31E8 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP FF3A31E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CREATE FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_CLOSE FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_POWER FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-0 IRP_MJ_PNP FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CREATE FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_CLOSE FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_POWER FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-1 IRP_MJ_PNP FFB4B1E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP FF3871E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CREATE FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_CLOSE FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_POWER FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL FFB4B1E8 Device \Driver\usbuhci \Device\USBFDO-2 IRP_MJ_PNP FFB4B1E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA FF3871E8 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP FF3871E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 80F601E8 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 80F601E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{F4AF2E8D-1210-4C2A-899E-C4D2A80CB379} IRP_MJ_CREATE FF3A31E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{F4AF2E8D-1210-4C2A-899E-C4D2A80CB379} IRP_MJ_CLOSE FF3A31E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{F4AF2E8D-1210-4C2A-899E-C4D2A80CB379} IRP_MJ_DEVICE_CONTROL FF3A31E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{F4AF2E8D-1210-4C2A-899E-C4D2A80CB379} IRP_MJ_INTERNAL_DEVICE_CONTROL FF3A31E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{F4AF2E8D-1210-4C2A-899E-C4D2A80CB379} IRP_MJ_CLEANUP FF3A31E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{F4AF2E8D-1210-4C2A-899E-C4D2A80CB379} IRP_MJ_PNP FF3A31E8 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_CREATE FFA4B7A0 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_CLOSE FFA4B7A0 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_DEVICE_CONTROL FFA4B7A0 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_INTERNAL_DEVICE_CONTROL FFA4B7A0 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_POWER FFA4B7A0 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_SYSTEM_CONTROL FFA4B7A0 Device \Driver\aodkfu41 \Device\Scsi\aodkfu411 IRP_MJ_PNP FFA4B7A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_CREATE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_CREATE_NAMED_PIPE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_CLOSE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_READ FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_WRITE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_QUERY_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SET_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_QUERY_EA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SET_EA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_FLUSH_BUFFERS FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SET_VOLUME_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_DIRECTORY_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_FILE_SYSTEM_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_DEVICE_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 80DC8980 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SHUTDOWN FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_LOCK_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_CLEANUP FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_CREATE_MAILSLOT FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_QUERY_SECURITY FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SET_SECURITY FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_POWER FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SYSTEM_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_DEVICE_CHANGE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_QUERY_QUOTA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_SET_QUOTA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091Port2Path0Target5Lun0 IRP_MJ_PNP FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_CREATE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_CREATE_NAMED_PIPE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_CLOSE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_READ FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_WRITE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_QUERY_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SET_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_QUERY_EA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SET_EA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_FLUSH_BUFFERS FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_QUERY_VOLUME_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SET_VOLUME_INFORMATION FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_DIRECTORY_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_FILE_SYSTEM_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_DEVICE_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_INTERNAL_DEVICE_CONTROL 80DC8980 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SHUTDOWN FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_LOCK_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_CLEANUP FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_CREATE_MAILSLOT FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_QUERY_SECURITY FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SET_SECURITY FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_POWER FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SYSTEM_CONTROL FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_DEVICE_CHANGE FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_QUERY_QUOTA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_SET_QUOTA FFA597A0 Device \Driver\uscsc109 \Device\Scsi\uscsc1091 IRP_MJ_PNP FFA597A0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP FF3841E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP FF3841E8 ---- Processes - GMER 1.0.12 ---- Process C:\Documents and Settings\menager\Pulpit\AdbeRdr80_en_US.exe (*** hidden *** ) 2488 ---- EOF - GMER 1.0.12 ----

GMER 1.0.12.12244 - http://www.gmer.net

Rootkit scan 2007-05-14 19:47:35

Windows 5.1.2600

---- Services - GMER 1.0.12 ----

Service .NET CLR Data

Service .NET CLR Networking

Service .NETFramework

Service [DISABLED] Abiosdsk

Service [DISABLED] abp480n5

Service C:\WINDOWS\System32\DRIVERS\ACPI.sys [bOOT] ACPI

Service [DISABLED] ACPIEC

Service C:\WINDOWS\System32\Drivers\adildr.sys [AUTO] ADILOADER

Service C:\WINDOWS\System32\DRIVERS\adiusbaw.sys [MANUAL] adiusbaw

Service [DISABLED] adpu160m

Service C:\WINDOWS\system32\drivers\aec.sys [MANUAL] aec

Service C:\WINDOWS\System32\drivers\afd.sys [AUTO] AFD

Service [DISABLED] Aha154x

Service [DISABLED] aic78u2

Service [DISABLED] aic78xx

Service C:\WINDOWS\system32\drivers\ALCXWDM.SYS [MANUAL] ALCXWDM

Service C:\WINDOWS\System32\svchost.exe [MANUAL] Alerter

Service C:\WINDOWS\System32\alg.exe [MANUAL] ALG

Service [DISABLED] AliIde

Service [DISABLED] amsint

Service C:\Program Files\AntiVir PersonalEdition Classic\sched.exe [AUTO] AntiVirScheduler

Service C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe [AUTO] AntiVirService

Service C:\WINDOWS\system32\svchost.exe [MANUAL] AppMgmt

Service [DISABLED] asc

Service [DISABLED] asc3350p

Service [DISABLED] asc3550

Service ASP.NET

Service ASP.NET_1.1.4322

Service C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe [MANUAL] aspnet_state

Service C:\WINDOWS\System32\DRIVERS\asyncmac.sys [MANUAL] AsyncMac

Service C:\WINDOWS\System32\DRIVERS\atapi.sys [bOOT] atapi

Service [DISABLED] Atdisk

Service C:\WINDOWS\System32\Ati2evxx.exe [AUTO] Ati HotKey Poller

Service C:\WINDOWS\system32\ati2sgag.exe [AUTO] ATI Smart

Service C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [MANUAL] ati2mtag

Service C:\WINDOWS\System32\DRIVERS\ATITool.sys [sYSTEM] ATITool

Service C:\WINDOWS\System32\DRIVERS\atmarpc.sys [MANUAL] Atmarpc

Service C:\WINDOWS\System32\svchost.exe [AUTO] AudioSrv

Service C:\WINDOWS\System32\DRIVERS\audstub.sys [MANUAL] audstub

Service C:\WINDOWS\SYSTEM32\DRIVERS\avgntdd.sys [sYSTEM] avgntdd

Service C:\WINDOWS\SYSTEM32\DRIVERS\avgntmgr.sys [bOOT] avgntmgr

Service C:\WINDOWS\System32\DRIVERS\avipbb.sys [sYSTEM] avipbb

Service BattC

Service [sYSTEM] Beep

Service C:\WINDOWS\System32\svchost.exe [MANUAL] BITS

Service C:\WINDOWS\System32\svchost.exe [AUTO] Browser

Service [DISABLED] cbidf2k

Service C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [MANUAL] CCDECODE

Service [DISABLED] cd20xrnt

Service [sYSTEM] Cdaudio

Service [DISABLED] Cdfs

Service C:\WINDOWS\System32\DRIVERS\cdrom.sys [sYSTEM] Cdrom

Service [sYSTEM] Changer

Service C:\WINDOWS\system32\cisvc.exe [MANUAL] cisvc

Service C:\WINDOWS\system32\clipsrv.exe [MANUAL] ClipSrv

Service [DISABLED] CmdIde

Service C:\WINDOWS\System32\dllhost.exe [MANUAL] COMSysApp

Service ContentFilter

Service ContentIndex

Service [DISABLED] Cpqarray

Service C:\WINDOWS\system32\svchost.exe [AUTO] CryptSvc

Service [DISABLED] dac2w2k

Service [DISABLED] dac960nt

Service C:\WINDOWS\System32\svchost.exe [AUTO] Dhcp

Service C:\WINDOWS\System32\DRIVERS\disk.sys [bOOT] Disk

Service C:\WINDOWS\System32\dmadmin.exe [MANUAL] dmadmin

Service C:\WINDOWS\System32\drivers\dmboot.sys [DISABLED] dmboot

Service C:\WINDOWS\System32\drivers\dmio.sys [bOOT] dmio

Service C:\WINDOWS\System32\drivers\dmload.sys [bOOT] dmload

Service C:\WINDOWS\System32\svchost.exe [AUTO] dmserver

Service C:\WINDOWS\system32\drivers\DMusic.sys [MANUAL] DMusic

Service C:\WINDOWS\System32\svchost.exe [AUTO] Dnscache

Service [DISABLED] dpti2o

Service C:\WINDOWS\system32\drivers\drmkaud.sys [MANUAL] drmkaud

Service C:\WINDOWS\System32\svchost.exe [AUTO] ERSvc

Service C:\WINDOWS\system32\services.exe [AUTO] Eventlog

Service C:\WINDOWS\System32\svchost.exe [MANUAL] EventSystem

Service [DISABLED] Fastfat

Service C:\WINDOWS\System32\svchost.exe [MANUAL] FastUserSwitchingCompatibility

Service C:\WINDOWS\System32\DRIVERS\fdc.sys [MANUAL] Fdc

Service [sYSTEM] Fips

Service C:\WINDOWS\System32\DRIVERS\flpydisk.sys [MANUAL] Flpydisk

Service [sYSTEM] Fs_Rec

Service C:\WINDOWS\System32\DRIVERS\ftdisk.sys [bOOT] Ftdisk

Service C:\WINDOWS\System32\DRIVERS\gameenum.sys [MANUAL] gameenum

Service C:\WINDOWS\System32\DRIVERS\gmer.sys [MANUAL] gmer

Service C:\WINDOWS\System32\DRIVERS\msgpc.sys [MANUAL] Gpc

Service [MANUAL] GVCplDrv

Service C:\WINDOWS\System32\svchost.exe [AUTO] helpsvc

Service C:\WINDOWS\System32\svchost.exe [DISABLED] HidServ

Service [DISABLED] hpn

Service [DISABLED] hpt3xx

Service [sYSTEM] i2omgmt

Service [DISABLED] i2omp

Service C:\WINDOWS\System32\DRIVERS\i8042prt.sys [sYSTEM] i8042prt

Service [sYSTEM] Imapi

Service C:\WINDOWS\System32\imapi.exe [MANUAL] ImapiService

Service inetaccs

Service [DISABLED] ini910u

Service Inport

Service [DISABLED] IntelIde

Service C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys [MANUAL] IpFilterDriver

Service C:\WINDOWS\System32\DRIVERS\ipinip.sys [MANUAL] IpInIp

Service C:\WINDOWS\System32\DRIVERS\ipnat.sys [MANUAL] IpNat

Service C:\WINDOWS\System32\DRIVERS\ipsec.sys [sYSTEM] IPSec

Service C:\WINDOWS\System32\DRIVERS\irenum.sys [MANUAL] IRENUM

Service ISAPISearch

Service C:\WINDOWS\System32\DRIVERS\isapnp.sys [bOOT] isapnp

Service C:\WINDOWS\System32\DRIVERS\kbdclass.sys [sYSTEM] Kbdclass

Service C:\WINDOWS\system32\drivers\kmixer.sys [MANUAL] kmixer

Service [bOOT] KSecDD

Service C:\WINDOWS\System32\svchost.exe [AUTO] lanmanserver

Service C:\WINDOWS\System32\svchost.exe [AUTO] lanmanworkstation

Service [sYSTEM] lbrtfdc

Service ldap

Service C:\WINDOWS\system32\LEXBCES.EXE [AUTO] LexBceS

Service LicenseService

Service C:\WINDOWS\System32\svchost.exe [AUTO] LmHosts

Service C:\WINDOWS\System32\svchost.exe [DISABLED] Messenger

Service [sYSTEM] mnmdd

Service C:\WINDOWS\System32\mnmsrvc.exe [MANUAL] mnmsrvc

Service [MANUAL] Modem

Service C:\WINDOWS\System32\DRIVERS\mouclass.sys [sYSTEM] Mouclass

Service [bOOT] MountMgr

Service [DISABLED] mraid35x

Service C:\WINDOWS\System32\DRIVERS\mrxdav.sys [MANUAL] MRxDAV

Service C:\WINDOWS\System32\DRIVERS\mrxsmb.sys [sYSTEM] MRxSmb

Service C:\WINDOWS\System32\msdtc.exe [MANUAL] MSDTC

Service [sYSTEM] Msfs

Service C:\WINDOWS\System32\msiexec.exe [MANUAL] MSIServer

Service C:\WINDOWS\system32\drivers\MSKSSRV.sys [MANUAL] MSKSSRV

Service C:\WINDOWS\system32\drivers\MSPCLOCK.sys [MANUAL] MSPCLOCK

Service C:\WINDOWS\system32\drivers\MSPQM.sys [MANUAL] MSPQM

Service C:\WINDOWS\system32\drivers\MSTEE.sys [MANUAL] MSTEE

Service C:\WINDOWS\system32\drivers\msmpu401.sys [MANUAL] ms_mpu401

Service [bOOT] Mup

Service C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [MANUAL] NABTSFEC

Service [bOOT] NDIS

Service C:\WINDOWS\System32\DRIVERS\NdisIP.sys [MANUAL] NdisIP

Service C:\WINDOWS\System32\DRIVERS\ndistapi.sys [MANUAL] NdisTapi

Service C:\WINDOWS\System32\DRIVERS\ndisuio.sys [MANUAL] Ndisuio

Service C:\WINDOWS\System32\DRIVERS\ndiswan.sys [MANUAL] NdisWan

Service [MANUAL] NDProxy

Service C:\WINDOWS\System32\DRIVERS\netbios.sys [sYSTEM] NetBIOS

Service C:\WINDOWS\System32\DRIVERS\netbt.sys [sYSTEM] NetBT

Service C:\WINDOWS\system32\netdde.exe [MANUAL] NetDDE

Service C:\WINDOWS\system32\netdde.exe [MANUAL] NetDDEdsdm

Service C:\WINDOWS\System32\lsass.exe [MANUAL] Netlogon

Service C:\WINDOWS\System32\svchost.exe [MANUAL] Netman

Service C:\WINDOWS\System32\svchost.exe [MANUAL] Nla

Service [sYSTEM] Npfs

Service [DISABLED] Ntfs

Service C:\WINDOWS\System32\lsass.exe [MANUAL] NtLmSsp

Service C:\WINDOWS\system32\svchost.exe [MANUAL] NtmsSvc

Service [sYSTEM] Null

Service nv4

Service C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys [MANUAL] NwlnkFlt

Service C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys [MANUAL] NwlnkFwd

Service C:\WINDOWS\System32\DRIVERS\PA707UCM.SYS [MANUAL] PAC7311

Service C:\WINDOWS\System32\DRIVERS\parport.sys [MANUAL] Parport

Service [bOOT] PartMgr

Service [AUTO] ParVdm

Service C:\WINDOWS\System32\DRIVERS\pci.sys [bOOT] PCI

Service [sYSTEM] PCIDump

Service [DISABLED] PCIIde

Service [DISABLED] Pcmcia

Service [MANUAL] PDCOMP

Service [MANUAL] PDFRAME

Service [MANUAL] PDRELI

Service [MANUAL] PDRFRAME

Service [DISABLED] perc2

Service [DISABLED] perc2hib

Service PerfDisk

Service PerfNet

Service PerfOS

Service PerfProc

Service C:\WINDOWS\system32\services.exe [AUTO] PlugPlay

Service C:\WINDOWS\System32\lsass.exe [AUTO] PolicyAgent

Service C:\WINDOWS\System32\DRIVERS\raspptp.sys [MANUAL] PptpMiniport

Service C:\WINDOWS\System32\DRIVERS\processr.sys [sYSTEM] Processor

Service C:\WINDOWS\system32\lsass.exe [AUTO] ProtectedStorage

Service C:\WINDOWS\System32\DRIVERS\psched.sys [MANUAL] PSched

Service C:\WINDOWS\System32\DRIVERS\ptilink.sys [MANUAL] Ptilink

Service [DISABLED] ql1080

Service

[Gutek]

Ja nic nie widzę w logach, jest Ok

[mister12_1994 (Mister13 1994)]

aha dzieki…a co do tego zawieszania się pasku start??

Złączono Posta : 16.05.2007 (Sro) 18:01

moze ktoś odpowiedzieć co z tym paskiem startu??