Prosze o sprawdzenie loga z GMER 1.0.9.8110


(Grzesiek1) #1

Komputer strasznie mulii logi z hijackthis ani silenta nic nie wykazują

GMER 1.0.9.8110 - http://www.gmer.net

Windows 5.1.2600 Dodatek Service Pack. 1



---- System - GMER 1.0.9 ----


SSDT \??\F:\WINDOWS\System32\drivers\wpsdrvnt.sys ZwAllocateVirtualMemory

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwCreateKey

SSDT \??\F:\Program Files\Anti Trojan Elite\ATEPMon.sys ZwCreateSection

SSDT \??\F:\WINDOWS\System32\drivers\wpsdrvnt.sys ZwCreateThread

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwDeleteKey

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwDeleteValueKey

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwEnumerateKey

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwEnumerateValueKey

SSDT \??\F:\WINDOWS\System32\drivers\wpsdrvnt.sys ZwMapViewOfSection

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwOpenKey

SSDT \??\F:\Program Files\ewido anti-malware\guard.sys ZwOpenProcess

SSDT \??\F:\WINDOWS\System32\drivers\wpsdrvnt.sys ZwProtectVirtualMemory

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwQueryKey

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwQueryValueKey

SSDT \SystemRoot\System32\Drivers\ShldDrv.SYS ZwSetValueKey

SSDT \??\F:\WINDOWS\System32\drivers\wpsdrvnt.sys ZwShutdownSystem

SSDT \??\F:\WINDOWS\System32\DRIVERS\PavProc.sys ZwTerminateProcess

SSDT \??\F:\WINDOWS\System32\DRIVERS\PavProc.sys ZwTerminateThread

SSDT \??\F:\WINDOWS\System32\drivers\wpsdrvnt.sys ZwWriteVirtualMemory


---- Devices - GMER 1.0.9 ----


Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [F7B6079A] ShldDrv.SYS

Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [F7B60B62] ShldDrv.SYS

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE [F7B6075C] ShldDrv.SYS

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA [F7B60B24] ShldDrv.SYS

Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE [F7A90220] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Ip IRP_MJ_CLOSEIRP_MJ_READ [F7A90480] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A905A0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Ip IRP_MJ_SHUTDOWN [F7A905D0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE [F7A90220] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSEIRP_MJ_READ [F7A90480] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A905A0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Tcp IRP_MJ_SHUTDOWN [F7A905D0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE [F7A90220] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Udp IRP_MJ_CLOSEIRP_MJ_READ [F7A90480] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A905A0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\Udp IRP_MJ_SHUTDOWN [F7A905D0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE [F7A90220] wpsdrvnt.sys

Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSEIRP_MJ_READ [F7A90480] wpsdrvnt.sys

Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A905A0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\RawIp IRP_MJ_SHUTDOWN [F7A905D0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE [F7A90220] wpsdrvnt.sys

Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLOSEIRP_MJ_READ [F7A90480] wpsdrvnt.sys

Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A905A0] wpsdrvnt.sys

Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SHUTDOWN [F7A905D0] wpsdrvnt.sys

Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE [F7B6075C] ShldDrv.SYS

Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [F7B60B24] ShldDrv.SYS


---- Files - GMER 1.0.9 ----


File C:\System Volume Information\MountPointManagerRemoteDatabase                 

File C:\System Volume Information\tracking.log                                    

File C:\System Volume Information\_restore{A65F8449-1AF8-4D3D-AECB-FEF28867B5EB}  


---- EOF - GMER 1.0.9 ----

(Kuz5) #2

Wstaw opis problemu

Zaznacz w jakis sposób że to log z innego kompa


(Gblade) #3

W logu nic nie ma

Poczytaj Tutaj