Tech Support Forum - View Single Post

hwstdez · 08-11-2007, 02:03 PM

This is the log from GMER scan:

Quote:

GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2007-08-11 14:59:59
Windows 5.1.2600 Service Pack 2

---- System - GMER 1.0.13 ----

SSDT \SystemRoot\System32\vsdatant.sys ZwConnectPort
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateFile
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateKey
SSDT \SystemRoot\System32\vsdatant.sys ZwCreatePort
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateProcess
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateProcessEx
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateSection
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateWaitablePort
SSDT \SystemRoot\System32\vsdatant.sys ZwDeleteFile
SSDT \SystemRoot\System32\vsdatant.sys ZwDeleteKey
SSDT \SystemRoot\System32\vsdatant.sys ZwDeleteValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwDuplicateObject
SSDT sptd.sys ZwEnumerateKey
SSDT sptd.sys ZwEnumerateValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwLoadKey
SSDT \SystemRoot\System32\vsdatant.sys ZwOpenFile
SSDT sptd.sys ZwOpenKey
SSDT \SystemRoot\System32\vsdatant.sys ZwOpenProcess
SSDT \SystemRoot\System32\vsdatant.sys ZwOpenThread
SSDT sptd.sys ZwQueryKey
SSDT sptd.sys ZwQueryValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwReplaceKey
SSDT \SystemRoot\System32\vsdatant.sys ZwRequestWaitReplyPort
SSDT \SystemRoot\System32\vsdatant.sys ZwRestoreKey
SSDT \SystemRoot\System32\vsdatant.sys ZwSecureConnectPort
SSDT \SystemRoot\System32\vsdatant.sys ZwSetInformationFile
SSDT \SystemRoot\System32\vsdatant.sys ZwSetValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwTerminateProcess

---- Kernel code sections - GMER 1.0.13 ----

.text ntkrnlpa.exe!ZwCallbackReturn + 23C0 80501290 2 Bytes [ 20, B8 ]
.text ntkrnlpa.exe!ZwCallbackReturn + 23E4 805012B4 12 Bytes [ F0, F1, 56, EE, 80, 54, 57, ... ]
.text ntkrnlpa.exe!ZwCallbackReturn + 2424 805012F4 2 Bytes [ A0, BE ]
.text ntkrnlpa.exe!ZwCallbackReturn + 2427 805012F7 5 Bytes [ EE, A0, 76, 57, EE ]
.text ntkrnlpa.exe!ZwCallbackReturn + 24FC 805013CC 2 Bytes [ F0, BC ]
.text ...
? C:\WINDOWS\system32\drivers\sptd.sys The process cannot access the file because it is being used by another process.
? srescan.sys The system cannot find the file specified.
.text USBPORT.SYS!DllUnload F6DAD62C 5 Bytes JMP 84988858
.text ntkrnlpa.exe!ZwYieldExecution + 2898 80501290 2 Bytes [ 20, B8 ]
.text ntkrnlpa.exe!ZwYieldExecution + 28BC 805012B4 12 Bytes [ F0, F1, 56, EE, 80, 54, 57, ... ]
.text ntkrnlpa.exe!ZwYieldExecution + 28FC 805012F4 2 Bytes [ A0, BE ]
.text ntkrnlpa.exe!ZwYieldExecution + 28FF 805012F7 5 Bytes [ EE, A0, 76, 57, EE ]
.text ntkrnlpa.exe!ZwYieldExecution + 29D4 805013CC 2 Bytes [ F0, BC ]
.text ...

---- Kernel IAT/EAT - GMER 1.0.13 ----

IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F72F9ABA] sptd.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F72F9C00] sptd.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F72F9B82] sptd.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F72FA72E] sptd.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F72FA604] sptd.sys
IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F730CB9A] sptd.sys
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol] [EE573950] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisOpenAdapter] [EE573E70] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisCloseAdapter] [EE573FD0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol] [EE573AC0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol] [EE573AC0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol] [EE573950] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisOpenAdapter] [EE573E70] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\psched.sys[NDIS.SYS!NdisCloseAdapter] [EE573FD0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol] [EE573950] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisCloseAdapter] [EE573FD0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisOpenAdapter] [EE573E70] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol] [EE573AC0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisCloseAdapter] [EE573FD0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisOpenAdapter] [EE573E70] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] [EE573950] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol] [EE573AC0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol] [EE573950] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisOpenAdapter] [EE573E70] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\wanarp.sys[NDIS.SYS!NdisCloseAdapter] [EE573FD0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] [EE573950] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] [EE573AC0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisCloseAdapter] [EE573FD0] \SystemRoot\System32\vsdatant.sys
IAT \SystemRoot\system32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisOpenAdapter] [EE573E70] \SystemRoot\System32\vsdatant.sys

---- Devices - GMER 1.0.13 ----

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 84B631D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 84B631D8

AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [F7A48404] avg7rsw.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [F7A48404] avg7rsw.sys

Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A7685A] avgtdi.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP [EE5808A0] vsdatant.sys

AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CREATE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CREATE_NAMED_PIPE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CLOSE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_READ [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_WRITE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_QUERY_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SET_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_QUERY_EA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SET_EA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_FLUSH_BUFFERS [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_QUERY_VOLUME_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SET_VOLUME_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_DIRECTORY_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_FILE_SYSTEM_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_DEVICE_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_INTERNAL_DEVICE_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SHUTDOWN [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_LOCK_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CLEANUP [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CREATE_MAILSLOT [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_QUERY_SECURITY [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SET_SECURITY [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_POWER [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SYSTEM_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_DEVICE_CHANGE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_QUERY_QUOTA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SET_QUOTA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CREATE [F7A46416] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_CLOSE [F7A46416] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_READ [F7A469B8] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_DEVICE_CONTROL [F7A46A16] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_POWER [F7A46B8A] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 IRP_MJ_SYSTEM_CONTROL [F7A46CBC] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CREATE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CREATE_NAMED_PIPE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CLOSE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_READ [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_WRITE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_QUERY_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SET_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_QUERY_EA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SET_EA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_FLUSH_BUFFERS [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_QUERY_VOLUME_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SET_VOLUME_INFORMATION [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_DIRECTORY_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_FILE_SYSTEM_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_DEVICE_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_INTERNAL_DEVICE_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SHUTDOWN [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_LOCK_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CLEANUP [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CREATE_MAILSLOT [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_QUERY_SECURITY [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SET_SECURITY [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_POWER [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SYSTEM_CONTROL [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_DEVICE_CHANGE [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_QUERY_QUOTA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SET_QUOTA [F6D4DBA0] SynTP.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CREATE [F7A46416] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_CLOSE [F7A46416] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_READ [F7A469B8] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_DEVICE_CONTROL [F7A46A16] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_POWER [F7A46B8A] EABFiltr.sys
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 IRP_MJ_SYSTEM_CONTROL [F7A46CBC] EABFiltr.sys

Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CREATE 849F61D8
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CLOSE 849F61D8
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_POWER 849F61D8
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_PNP 849F61D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 84BD31D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 84BD31D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_CREATE 849F61D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_CLOSE 849F61D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_POWER 849F61D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBPDO-1 IRP_MJ_PNP 849F61D8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_CREATE 849F54F8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_CLOSE 849F54F8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 849F54F8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 849F54F8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_POWER 849F54F8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 849F54F8
Device \Driver\usbehci \Device\USBPDO-2 IRP_MJ_PNP 849F54F8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A7685A] avgtdi.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP [EE5808A0] vsdatant.sys
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 84B651D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 84B651D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 849671D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 849671D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 84B641D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 84B641D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 84B641D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CREATE 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_CLOSE 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_INTERNAL_DEVICE_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_POWER 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_SYSTEM_CONTROL 84B641D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-e IRP_MJ_PNP 84B641D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 841501D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 841501D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 841501D8
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 841501D8
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 841501D8
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE 841501D8
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP 841501D8
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP 841501D8
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A7685A] avgtdi.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A7685A] avgtdi.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP [EE5808A0] vsdatant.sys
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CREATE 849F61D8
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CLOSE 849F61D8
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_POWER 849F61D8
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_PNP 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_CREATE 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_CLOSE 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_POWER 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 849F61D8
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_PNP 849F61D8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLOSE [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CONTROL [EE5808A0] vsdatant.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F7A7685A] avgtdi.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLEANUP [EE5808A0] vsdatant.sys
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_CREATE 849F54F8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_CLOSE 849F54F8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 849F54F8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 849F54F8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_POWER 849F54F8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 849F54F8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_PNP 849F54F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 83FD61D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 83FD61D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 84B651D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 84B651D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{BB203DF8-FC27-4772-8FBA-50420A9FE1A4} IRP_MJ_CREATE 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{BB203DF8-FC27-4772-8FBA-50420A9FE1A4} IRP_MJ_CLOSE 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{BB203DF8-FC27-4772-8FBA-50420A9FE1A4} IRP_MJ_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{BB203DF8-FC27-4772-8FBA-50420A9FE1A4} IRP_MJ_INTERNAL_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{BB203DF8-FC27-4772-8FBA-50420A9FE1A4} IRP_MJ_CLEANUP 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{BB203DF8-FC27-4772-8FBA-50420A9FE1A4} IRP_MJ_PNP 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{D0FC7369-2E08-4889-B7D3-D89FDCDDD719} IRP_MJ_CREATE 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{D0FC7369-2E08-4889-B7D3-D89FDCDDD719} IRP_MJ_CLOSE 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{D0FC7369-2E08-4889-B7D3-D89FDCDDD719} IRP_MJ_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{D0FC7369-2E08-4889-B7D3-D89FDCDDD719} IRP_MJ_INTERNAL_DEVICE_CONTROL 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{D0FC7369-2E08-4889-B7D3-D89FDCDDD719} IRP_MJ_CLEANUP 841501D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{D0FC7369-2E08-4889-B7D3-D89FDCDDD719} IRP_MJ_PNP 841501D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 83FBA1D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 83FBA1D8

---- EOF - GMER 1.0.13 ----