Ukryte wirusy;/;/prosze o spr.logów

witam!mam ukryte wiry prosze pmi pomoć:

GMER 1.0.12.12011 - http://www.gmer.net

Rootkit scan 2007-02-02 16:19:10

Windows 5.1.2600 Dodatek Service Pack 2

---- System - GMER 1.0.12 ----

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwClose

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwCreateKey

SSDT a347bus.sys ZwCreatePagingFile

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwCreateProcess

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwCreateProcessEx

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwCreateSection

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwCreateSymbolicLinkObject

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwCreateThread

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwDeleteKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwDeleteValueKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwDuplicateObject

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwEnumerateKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwEnumerateValueKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwFlushKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwInitializeRegistry

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwLoadKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwLoadKey2

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwNotifyChangeKey

SSDT kl1.sys ZwOpenFile

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwOpenKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwOpenProcess

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwOpenSection

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwQueryKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwQueryMultipleValueKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwQuerySystemInformation

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwQueryValueKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwReplaceKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwRestoreKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwResumeThread

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSaveKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSetContextThread

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSetInformationFile

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSetInformationKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSetInformationProcess

SSDT a347bus.sys ZwSetSystemPowerState

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSetValueKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwSuspendThread

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwTerminateProcess

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwUnloadKey

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys ZwWriteVirtualMemory

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[284]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[285]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[286]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[287]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[288]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[289]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[290]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[291]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[292]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[293]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[294]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[295]

SSDT ??\G:\WINDOWS\system32\drivers\klif.sys SSDT[296]

Code ??\G:\WINDOWS\system32\drivers\klif.sys FsRtlCheckLockForReadAccess

Code ??\G:\WINDOWS\system32\drivers\klif.sys IoIsOperationSynchronous

Code ??\G:\WINDOWS\system32:lzx32.sys pIofCallDriver

---- Kernel code sections - GMER 1.0.12 ----

.text ntkrnlpa.exe!FsRtlCheckLockForReadAccess 804E9E14 5 Bytes JMP EF3DB6C0 ??\G:\WINDOWS\system32\drivers\klif.sys

.text ntkrnlpa.exe!IoIsOperationSynchronous 804EE54E 5 Bytes JMP EF3DBB50 ??\G:\WINDOWS\system32\drivers\klif.sys

.text ntkrnlpa.exe!ZwCallbackReturn + 2448 8050114C 2 Bytes [DC, 85]

.text ntkrnlpa.exe!ZwCallbackReturn + 244B 8050114F 1 Byte [F8]

.text ntkrnlpa.exe!ZwCallbackReturn + 25AC 805012B0 2 Bytes [FC, 85]

.text ntkrnlpa.exe!ZwCallbackReturn + 25AF 805012B3 1 Byte [F8]

.text ntkrnlpa.exe!KeReleaseInStackQueuedSpinLockFromDpcLevel + A1C 8053C710 4 Bytes JMP 806B9769 \WINDOWS\system32\ntkrnlpa.exe

.text ntkrnlpa.exe!KiDispatchInterrupt + BA 80540ABA 7 Bytes JMP EF3DDE10 ??\G:\WINDOWS\system32\drivers\klif.sys

.text USBPORT.SYS!DllUnload F7F2862C 5 Bytes JMP 829711B8

.text tcpip.sys!IPTransmit + 10B7 EF508CFA 6 Bytes CALL EF5969B6 ??\G:\WINDOWS\system32:lzx32.sys

.text tcpip.sys!IPTransmit + 24D9 EF50A11C 6 Bytes CALL EF5969B6 ??\G:\WINDOWS\system32:lzx32.sys

.text tcpip.sys!IPTransmit + 4662 EF50C2A5 6 Bytes CALL EF5969B6 ??\G:\WINDOWS\system32:lzx32.sys

.text wanarp.sys F88A43FD 7 Bytes CALL EF5969C0 ??\G:\WINDOWS\system32:lzx32.sys

---- Devices - GMER 1.0.12 ----

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 829D41D8

Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 829D41D8

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLOSE 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ 81A2B7E0

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_WRITE 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_INFORMATION 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_INFORMATION 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_EA 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FLUSH_BUFFERS 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_VOLUME_INFORMATION 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_VOLUME_INFORMATION 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DIRECTORY_CONTROL 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FILE_SYSTEM_CONTROL 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DEVICE_CONTROL 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SHUTDOWN 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_LOCK_CONTROL 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLEANUP 81A85990

Device \FileSystem\Fastfat \FatCdrom IRP_MJ_PNP 81A85990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CREATE 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CLOSE 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_READ 82520988

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_WRITE 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_QUERY_INFORMATION 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_SET_INFORMATION 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_QUERY_VOLUME_INFORMATION 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_DIRECTORY_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_FILE_SYSTEM_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_DEVICE_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_LOCK_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CLEANUP 81A17990

Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_PNP 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CREATE 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CLOSE 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_READ 82520988

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_WRITE 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_QUERY_INFORMATION 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_SET_INFORMATION 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_QUERY_VOLUME_INFORMATION 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_DIRECTORY_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_FILE_SYSTEM_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_DEVICE_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_LOCK_CONTROL 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CLEANUP 81A17990

Device \FileSystem\Udfs \UdfsDisk IRP_MJ_PNP 81A17990

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CREATE 82862618

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CLOSE 82862618

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 82862618

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82862618

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_POWER 82862618

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 82862618

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_PNP 82862618

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 829D61D8

Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 829D61D8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CREATE 827B97B8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CLOSE 827B97B8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 827B97B8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 827B97B8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_POWER 827B97B8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 827B97B8

Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_PNP 827B97B8

Device \Driver\prodrv06 \Device\ProDrv06 IRP_MJ_CREATE E1D35C30

Device \Driver\prodrv06 \Device\ProDrv06 IRP_MJ_CLOSE E1D35C30

Device \Driver\prodrv06 \Device\ProDrv06 IRP_MJ_DEVICE_CONTROL E1D35C30

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 829701D8

Device \Driver\00000036 \Device\00000058 IRP_MJ_POWER [F8663DB6] sptd.sys

Device \Driver\00000036 \Device\00000058 IRP_MJ_SYSTEM_CONTROL [F867973C] sptd.sys

Device \Driver\00000036 \Device\00000058 IRP_MJ_PNP [F867277E] sptd.sys

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 829701D8

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 82598420

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 82598420

Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_READ 8271E0B8

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 82598420

Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 82598420

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP 829701D8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_READ 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_READ 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_READ 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_READ 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_CREATE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_CREATE_NAMED_PIPE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_CLOSE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_READ 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_WRITE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_QUERY_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SET_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_QUERY_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SET_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_FLUSH_BUFFERS 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_QUERY_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SET_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_DIRECTORY_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_FILE_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_INTERNAL_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SHUTDOWN 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_LOCK_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_CLEANUP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_CREATE_MAILSLOT 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_QUERY_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SET_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_POWER 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_DEVICE_CHANGE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_QUERY_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_SET_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-18 IRP_MJ_PNP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_CREATE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_CREATE_NAMED_PIPE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_CLOSE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_READ 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_WRITE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_QUERY_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SET_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_QUERY_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SET_EA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_FLUSH_BUFFERS 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_QUERY_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SET_VOLUME_INFORMATION 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_DIRECTORY_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_FILE_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_INTERNAL_DEVICE_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SHUTDOWN 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_LOCK_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_CLEANUP 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_CREATE_MAILSLOT 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_QUERY_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SET_SECURITY 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_POWER 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SYSTEM_CONTROL 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_DEVICE_CHANGE 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_QUERY_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_SET_QUOTA 829DC1F8

Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-20 IRP_MJ_PNP 829DC1F8

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSE 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_READ 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 82598420

Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 82598420

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CREATE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_READ 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_WRITE 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_FLUSH_BUFFERS 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_INTERNAL_DEVICE_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SHUTDOWN 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CLEANUP 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_POWER 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SYSTEM_CONTROL 829701D8

Device \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_PNP 829701D8

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSE 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_READ 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY 82598420

Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER

Użyj narzędzia Rustock.b-fix.

Po wykonaniu wklej dwa logi z Gmer’a wykonane przy ustawieniach:

  1. Zakładka Rootkit >>> zaznaczone wszystko oprócz Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

  2. Zakładka Rootkit >>> zaznaczone tylko Usługi i Pokazuj wszystko >>> kliknij Szukaj >>> czekaj cierpliwie aż skończy >>> Kopiuj >>> wklej do posta

Jeśli wszystkie logi nie zmieszczą się bezpośrednio do posta to umieść je jako pliki w jakimś serwisie hostingowym i daj linki.

http://forum.dobreprogramy.pl/viewtopic.php?t=96929