GMER 1.0.11.11384 - http://www.gmer.net Rootkit 2006-09-28 23:38:36 Windows 5.1.2600 Service Pack 2 ---- System - GMER 1.0.11 ---- SSDT 8A59A4D8 ZwConnectPort SSDT sptd.sys ZwCreateKey SSDT sptd.sys ZwEnumerateKey SSDT sptd.sys ZwEnumerateValueKey SSDT sptd.sys ZwOpenKey SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwOpenProcess SSDT sptd.sys ZwQueryKey SSDT sptd.sys ZwQueryValueKey SSDT sptd.sys ZwSetValueKey SSDT \??\C:\Program Files\ewido anti-spyware 4.0\guard.sys ZwTerminateProcess ---- Devices - GMER 1.0.11 ---- Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 8AD03EB0 Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 8AD03EB0 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 8AD4E630 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 8AB225F0 Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 8AB225F0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_NAMED_PIPE 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLOSE 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_READ 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_WRITE 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_INFORMATION 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_INFORMATION 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_EA 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_EA 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FLUSH_BUFFERS 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_VOLUME_INFORMATION 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_VOLUME_INFORMATION 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DIRECTORY_CONTROL 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_FILE_SYSTEM_CONTROL 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CONTROL 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_INTERNAL_DEVICE_CONTROL 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SHUTDOWN 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_LOCK_CONTROL 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CLEANUP 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_CREATE_MAILSLOT 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_SECURITY 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_SECURITY 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_POWER 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SYSTEM_CONTROL 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_DEVICE_CHANGE 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_QUERY_QUOTA 895577E0 Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_SET_QUOTA 895577E0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 8AB225F0 Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 8AB225F0 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 8A04C458 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 8A04C458 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 8A04C458 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 8A04C458 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 8A04C458 Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 8A04C458 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 8A04C458 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE 8A04C458 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL 8A04C458 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL 8A04C458 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP 8A04C458 Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP 8A04C458 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CREATE 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_CLOSE 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_READ 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_WRITE 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_FLUSH_BUFFERS 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_DEVICE_CONTROL 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_SHUTDOWN 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_POWER 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_SYSTEM_CONTROL 8AD030E8 Device \Driver\Disk \Device\Harddisk0\DR0 IRP_MJ_PNP 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_CREATE 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_CLOSE 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_READ 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_WRITE 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_FLUSH_BUFFERS 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_DEVICE_CONTROL 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_SHUTDOWN 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_POWER 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_SYSTEM_CONTROL 8AD030E8 Device \Driver\Disk \Device\Harddisk1\DR1 IRP_MJ_PNP 8AD030E8 Device \Driver\NetBT \Device\NetBT_Tcpip_{3C8A8854-7C3E-47CF-970F-A041489F093A} IRP_MJ_CREATE 8A04C458 Device \Driver\NetBT \Device\NetBT_Tcpip_{3C8A8854-7C3E-47CF-970F-A041489F093A} IRP_MJ_CLOSE 8A04C458 Device \Driver\NetBT \Device\NetBT_Tcpip_{3C8A8854-7C3E-47CF-970F-A041489F093A} IRP_MJ_DEVICE_CONTROL 8A04C458 Device \Driver\NetBT \Device\NetBT_Tcpip_{3C8A8854-7C3E-47CF-970F-A041489F093A} IRP_MJ_INTERNAL_DEVICE_CONTROL 8A04C458 Device \Driver\NetBT \Device\NetBT_Tcpip_{3C8A8854-7C3E-47CF-970F-A041489F093A} IRP_MJ_CLEANUP 8A04C458 Device \Driver\NetBT \Device\NetBT_Tcpip_{3C8A8854-7C3E-47CF-970F-A041489F093A} IRP_MJ_PNP 8A04C458 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 895557E0 Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 895557E0 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CREATE_NAMED_PIPE 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLOSE 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_READ 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_WRITE 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_INFORMATION 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_INFORMATION 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_FLUSH_BUFFERS 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_VOLUME_INFORMATION 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_DIRECTORY_CONTROL 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_FILE_SYSTEM_CONTROL 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_CLEANUP 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_QUERY_SECURITY 8A599828 Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_SET_SECURITY 8A599828 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 8AD4E630 Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 8AD4E630 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CLOSE 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_READ 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_WRITE 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_QUERY_INFORMATION 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_SET_INFORMATION 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_QUERY_VOLUME_INFORMATION 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_DIRECTORY_CONTROL 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_FILE_SYSTEM_CONTROL 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CLEANUP 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_CREATE_MAILSLOT 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_QUERY_SECURITY 8A0560E8 Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_SET_SECURITY 8A0560E8 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 8AC74BD0 Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 8AC74BD0 ---- Files - GMER 1.0.11 ---- ADS ... ADS ... ---- EOF - GMER 1.0.11 ----