GMER 1.0.12.11889 -
http://www.gmer.net
Rootkit scan 2006-11-11 02:48:51
Windows 5.1.2600 Service Pack 1
---- System - GMER 1.0.12 ----
SSDT d347bus.sys ZwClose
SSDT \SystemRoot\System32\vsdatant.sys ZwConnectPort
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateFile
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateKey
SSDT d347bus.sys ZwCreatePagingFile
SSDT \SystemRoot\System32\vsdatant.sys ZwCreatePort
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateProcess
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateProcessEx
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateSection
SSDT \SystemRoot\System32\vsdatant.sys ZwCreateWaitablePort
SSDT \SystemRoot\System32\vsdatant.sys ZwDeleteFile
SSDT \SystemRoot\System32\vsdatant.sys ZwDeleteKey
SSDT \SystemRoot\System32\vsdatant.sys ZwDeleteValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwDuplicateObject
SSDT d347bus.sys ZwEnumerateKey
SSDT d347bus.sys ZwEnumerateValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwLoadKey
SSDT \SystemRoot\System32\vsdatant.sys ZwMapViewOfSection
SSDT \SystemRoot\System32\vsdatant.sys ZwOpenFile
SSDT d347bus.sys ZwOpenKey
SSDT \SystemRoot\System32\vsdatant.sys ZwOpenProcess
SSDT \SystemRoot\System32\vsdatant.sys ZwOpenThread
SSDT d347bus.sys ZwQueryKey
SSDT d347bus.sys ZwQueryValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwReplaceKey
SSDT \SystemRoot\System32\vsdatant.sys ZwRequestWaitReplyPort
SSDT \SystemRoot\System32\vsdatant.sys ZwRestoreKey
SSDT \SystemRoot\System32\vsdatant.sys ZwSecureConnectPort
SSDT \SystemRoot\System32\vsdatant.sys ZwSetInformationFile
SSDT \SystemRoot\System32\vsdatant.sys ZwSetSystemInformation
SSDT d347bus.sys ZwSetSystemPowerState
SSDT \SystemRoot\System32\vsdatant.sys ZwSetValueKey
SSDT \SystemRoot\System32\vsdatant.sys ZwTerminateProcess
---- Kernel code sections - GMER 1.0.12 ----
.text ntoskrnl.exe!_abnormal_termination + FA 804DE6AC 16 Bytes
.text netbt.sys F0A14380 1 Byte
.text netbt.sys F0A14382 28 Bytes
.text netbt.sys F0A1439F 69 Bytes
.text netbt.sys F0A143E5 42 Bytes
.text netbt.sys F0A14410 7 Bytes
.text ...
.text ntdll.dll!NtClose 77F5B5C8 5 Bytes JMP 72033A2A
.text ntdll.dll!NtCreateProcess 77F5B728 5 Bytes JMP 72033BB5
.text ntdll.dll!NtCreateProcessEx 77F5B738 5 Bytes JMP 72033A99
.text ntdll.dll!NtCreateSection 77F5B758 5 Bytes JMP 72033A48
.text ntoskrnl.exe!_abnormal_termination + FA 804DE6AC 16 Bytes
---- User code sections - GMER 1.0.12 ----
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + FFFF8CB9 75B511DC 1 Byte
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + FFFF8CBD 75B511E0 1 Byte
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + FFFF8CC1 75B511E4 6 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + FFFF8CC9 75B511EC 1 Byte
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + FFFF8CCD 75B511F0 1 Byte
.text ...
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!ServerDllInitialization + 10 75B52D9B 25 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!ServerDllInitialization + 2B 75B52DB6 79 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!ServerDllInitialization + 7C 75B52E07 27 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!ServerDllInitialization + 99 75B52E24 11 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!ServerDllInitialization + A6 75B52E31 83 Bytes
.text ...
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSetProcessCreateNotify + 26 75B54253 61 Bytes CALL 75B59463 C:\WINDOWS\system32\basesrv.dll
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSetProcessCreateNotify + 64 75B54291 5 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSetProcessCreateNotify + 6A 75B54297 43 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSetProcessCreateNotify + 96 75B542C3 59 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSetProcessCreateNotify + D2 75B542FF 15 Bytes
.text ...
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsLogon + 9A 75B5841F 20 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsLogon + B0 75B58435 20 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsLogon + C5 75B5844A 52 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsLogon + FB 75B58480 38 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsLogon + 122 75B584A7 12 Bytes
.text ...
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + 6E 75B58591 9 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + 78 75B5859B 1 Byte
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + 7A 75B5859D 10 Bytes
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + 86 75B585A9 1 Byte
.text C:\WINDOWS\system32\csrss.exe[740] basesrv.dll!BaseSrvNlsUpdateRegistryCache + 8A 75B585AD 130 Bytes
.text ...
---- Devices - GMER 1.0.12 ----
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 819B15C8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ FF7B0AB0
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F9A9285A] avgtdi.sys
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F9A9285A] avgtdi.sys
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP [F09F92A0] vsdatant.sys
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP FF529678
Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_READ FF792FB0
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP FF529678
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE_NAMED_PIPE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CLOSE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_READ FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_WRITE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_EA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_EA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_FLUSH_BUFFERS FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DIRECTORY_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_FILE_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SHUTDOWN FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_LOCK_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CLEANUP FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE_MAILSLOT FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_POWER FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DEVICE_CHANGE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_PNP FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE_NAMED_PIPE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_READ FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_WRITE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_QUERY_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SET_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_QUERY_EA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SET_EA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_FLUSH_BUFFERS FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_QUERY_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SET_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DIRECTORY_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_FILE_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SHUTDOWN FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_LOCK_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLEANUP FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE_MAILSLOT FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_QUERY_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SET_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CHANGE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_QUERY_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SET_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_READ FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_READ FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CREATE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CREATE_NAMED_PIPE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CLOSE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_READ FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_WRITE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_QUERY_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SET_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_QUERY_EA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SET_EA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_FLUSH_BUFFERS FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_QUERY_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SET_VOLUME_INFORMATION FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_DIRECTORY_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_FILE_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_INTERNAL_DEVICE_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SHUTDOWN FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_LOCK_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CLEANUP FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CREATE_MAILSLOT FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_QUERY_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SET_SECURITY FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_POWER FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SYSTEM_CONTROL FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_DEVICE_CHANGE FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_QUERY_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SET_QUOTA FF924008
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_PNP FF924008
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSE FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_READ FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_NAMED_PIPE FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLOSE FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_READ FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_WRITE FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_EA FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_EA FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FLUSH_BUFFERS FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DIRECTORY_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_FILE_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_INTERNAL_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SHUTDOWN FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_LOCK_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CLEANUP FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_CREATE_MAILSLOT FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_POWER FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_DEVICE_CHANGE FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_QUERY_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_SET_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom3 IRP_MJ_PNP FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_NAMED_PIPE FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLOSE FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_READ FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_WRITE FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_EA FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_EA FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FLUSH_BUFFERS FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DIRECTORY_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_FILE_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_INTERNAL_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SHUTDOWN FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_LOCK_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CLEANUP FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_CREATE_MAILSLOT FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_POWER FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_DEVICE_CHANGE FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_QUERY_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_SET_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom4 IRP_MJ_PNP FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_CREATE FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_CREATE_NAMED_PIPE FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_CLOSE FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_READ FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_WRITE FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_QUERY_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SET_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_QUERY_EA FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SET_EA FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_FLUSH_BUFFERS FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_QUERY_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SET_VOLUME_INFORMATION FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_DIRECTORY_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_FILE_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_INTERNAL_DEVICE_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SHUTDOWN FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_LOCK_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_CLEANUP FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_CREATE_MAILSLOT FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_QUERY_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SET_SECURITY FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_POWER FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SYSTEM_CONTROL FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_DEVICE_CHANGE FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_QUERY_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_SET_QUOTA FF529678
Device \Driver\Cdrom \Device\CdRom5 IRP_MJ_PNP FF529678
Device \FileSystem\Srv \Device\LanmanServer IRP_MJ_READ FF5578C8
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F9A9285A] avgtdi.sys
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F9A9285A] avgtdi.sys
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP [F09F92A0] vsdatant.sys
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ FF586EA8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLOSE [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CONTROL [F09F92A0] vsdatant.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL [F9A9285A] avgtdi.sys
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLEANUP [F09F92A0] vsdatant.sys
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ FF586EA8
Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_READ FF86D318
Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_READ FF711B88
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_CREATE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_CLOSE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_READ FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_WRITE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SET_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_QUERY_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SET_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_LOCK_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_CLEANUP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_QUERY_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SET_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_POWER FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CHANGE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_QUERY_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_SET_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target0Lun0 IRP_MJ_PNP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_CREATE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_CREATE_NAMED_PIPE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_CLOSE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_READ FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_WRITE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_QUERY_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SET_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_QUERY_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SET_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_FLUSH_BUFFERS FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SET_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_DIRECTORY_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_FILE_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SHUTDOWN FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_LOCK_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_CLEANUP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_CREATE_MAILSLOT FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_QUERY_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SET_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_POWER FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_DEVICE_CHANGE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_QUERY_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_SET_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target2Lun0 IRP_MJ_PNP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_CREATE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_CREATE_NAMED_PIPE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_CLOSE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_READ FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_WRITE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_QUERY_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SET_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_QUERY_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SET_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_FLUSH_BUFFERS FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SET_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_DIRECTORY_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_FILE_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SHUTDOWN FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_LOCK_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_CLEANUP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_CREATE_MAILSLOT FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_QUERY_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SET_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_POWER FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_DEVICE_CHANGE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_QUERY_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_SET_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target3Lun0 IRP_MJ_PNP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_CREATE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_CREATE_NAMED_PIPE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_CLOSE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_READ FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_WRITE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_QUERY_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SET_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_QUERY_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SET_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_FLUSH_BUFFERS FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SET_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_DIRECTORY_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_FILE_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SHUTDOWN FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_LOCK_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_CLEANUP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_CREATE_MAILSLOT FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_QUERY_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SET_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_POWER FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_DEVICE_CHANGE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_QUERY_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_SET_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1Port2Path0Target1Lun0 IRP_MJ_PNP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_CREATE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_CREATE_NAMED_PIPE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_CLOSE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_READ FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_WRITE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_QUERY_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SET_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_QUERY_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SET_EA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_FLUSH_BUFFERS FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_QUERY_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SET_VOLUME_INFORMATION FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_DIRECTORY_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_FILE_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_INTERNAL_DEVICE_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SHUTDOWN FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_LOCK_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_CLEANUP FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_CREATE_MAILSLOT FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_QUERY_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SET_SECURITY FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_POWER FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SYSTEM_CONTROL FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_DEVICE_CHANGE FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_QUERY_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_SET_QUOTA FF961248
Device \Driver\d347prt \Device\Scsi\d347prt1 IRP_MJ_PNP FF961248
Device \FileSystem\Fastfat \Fat IRP_MJ_READ FF7B0AB0
Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer IRP_MJ_READ FF6EB1E8
Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer IRP_MJ_READ FF6EB1E8
Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer IRP_MJ_READ FF6EB1E8
Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer IRP_MJ_READ FF6EB1E8
Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer IRP_MJ_READ FF6EB1E8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ FF7ABF10
---- Modules - GMER 1.0.12 ----
Module _________ F9480000
---- Files - GMER 1.0.12 ----
ADS C:\WINDOWS\system32\hpgwiamd.dll:KAVICHS
ADS C:\WINDOWS\system32\hpotscl.dll:KAVICHS
ADS C:\WINDOWS\system32\HPZc3212.dll:KAVICHS
ADS D:\Abu Dhabi.doc:KAVICHS
ADS D:\Addr.doc:KAVICHS
ADS D:\appx.doc:KAVICHS
ADS D:\Attn.doc:KAVICHS
ADS D:\baby.jpg:KAVICHS
ADS D:\BitCometTracker_0.1\BitCometTracker.exe:KAVICHS
ADS D:\BitCometTracker_0.1\BitCometTracker.xml:KAVICHS
ADS D:\BitCometTracker_0.1\ChangeLog.txt:KAVICHS
ADS D:\BitCometTracker_0.1\dbghelp.dll:KAVICHS
ADS D:\BitCometTracker_0.1\License.txt:KAVICHS
ADS D:\BitCometTracker_0.1\Plugins_example\db_mysql.dll:KAVICHS
ADS ...
ADS E:\kav5014ppro.Key:KAVICHS
ADS E:\RECYCLER\S-1-5-21-582103443-3301898836-4258192708-1005\INFO2:KAVICHS
ADS E:\RegeSave.reg:KAVICHS
ADS E:\scan.pdf:KAVICHS
ADS E:\scan2.pdf:KAVICHS
ADS E:\sysbckup files\servicpck tcpip.sys file\tcpip.sys:KAVICHS
ADS E:\sysbckup files\system32 tcpip.sys\tcpip.sys:KAVICHS
---- EOF - GMER 1.0.12 ----