Prufrock
14/01/08, 17:31:20
Hola gentes, ejecuté el GMER para saber si estoy libre de rootkits y quisiera saber si alguno de uds puede interpretar el log. No he visto nada raro, sólo quiero comprobar que no tenga el Mebroot, leí en la BBC que está haciendo estragos por estos lares
De paso les pregunto, saben si el Avast me protege contra rootkits o me conviene desintalarlo e instalar AVG... o algún otro antivirus?
grazie mille!!
GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2008-01-14 22:09:47
Windows 5.1.2600 Service Pack 2
---- System - GMER 1.0.13 ----
SSDT 84335F30 ZwAllocateVirtualMemory
SSDT 843AED18 ZwCreateKey
SSDT 84327630 ZwCreateProcess
SSDT 843275B8 ZwCreateProcessEx
SSDT 843273D8 ZwCreateThread
SSDT 84336D10 ZwDeleteKey
SSDT 843276A8 ZwDeleteValueKey
SSDT 84335FA8 ZwQueueApcThread
SSDT 84335E40 ZwReadVirtualMemory
SSDT 843CB0A8 ZwRenameKey
SSDT 84327270 ZwSetContextThread
SSDT 843E00A8 ZwSetInformationKey
SSDT 843274C8 ZwSetInformationProcess
SSDT 843272E8 ZwSetInformationThread
SSDT 84327720 ZwSetValueKey
SSDT 84327450 ZwSuspendProcess
SSDT 84335020 ZwSuspendThread
SSDT 84327540 ZwTerminateProcess
SSDT 84327360 ZwTerminateThread
SSDT 84335EB8 ZwWriteVirtualMemory
---- Kernel code sections - GMER 1.0.13 ----
.text ntoskrnl.exe!_abnormal_termination + 451 804E2AAD 7 Bytes [ 75, 32, 84, 60, 73, 32, 84 ]
---- User code sections - GMER 1.0.13 ----
.text C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe[1924] kernel32.dll!CreateThread + 1A 7C810651 4 Bytes [ AB, FA, C3, 83 ]
.text C:\Archivos de programa\MSN Messenger\msnmsgr.exe[2636] kernel32.dll!SetUnhandledExceptionFilter 7C84467D 5 Bytes JMP 004DE392 C:\Archivos de programa\MSN Messenger\msnmsgr.exe
---- Kernel IAT/EAT - GMER 1.0.13 ----
IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\arp1394.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\arp1394.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
---- Devices - GMER 1.0.13 ----
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [EDE87F76] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [EDE86812] aswMon2.SYS
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\Ip IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\Ip IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\Ip IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\Ip IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\Ip IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\Ip IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\Ip IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\Ip IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\Ip IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\Ip IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\Tcp IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\Tcp IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\Tcp IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\Tcp IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\Tcp IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\Udp IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\Udp IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\Udp IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\Udp IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\Udp IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\Udp IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\Udp IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\Udp IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\Udp IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\Udp IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\RawIp IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\RawIp IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\RawIp IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\RawIp IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\RawIp IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_PNP 8407F7C0
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_NAMED_PIPE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLOSE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_READ [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_WRITE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_INTERNAL_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_MAILSLOT [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_POWER [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CHANGE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_NAMED_PIPE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLOSE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_READ [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_WRITE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL [EDE87F76] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_INTERNAL_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_MAILSLOT [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_POWER [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SYSTEM_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CHANGE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_QUOTA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_QUOTA [EDE86812] aswMon2.SYS
---- Files - GMER 1.0.13 ----
ADS C:\Documents and Settings\Adrian\Favoritos\ShinyStat:favicon
---- EOF - GMER 1.0.13 ----
De paso les pregunto, saben si el Avast me protege contra rootkits o me conviene desintalarlo e instalar AVG... o algún otro antivirus?
grazie mille!!
GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2008-01-14 22:09:47
Windows 5.1.2600 Service Pack 2
---- System - GMER 1.0.13 ----
SSDT 84335F30 ZwAllocateVirtualMemory
SSDT 843AED18 ZwCreateKey
SSDT 84327630 ZwCreateProcess
SSDT 843275B8 ZwCreateProcessEx
SSDT 843273D8 ZwCreateThread
SSDT 84336D10 ZwDeleteKey
SSDT 843276A8 ZwDeleteValueKey
SSDT 84335FA8 ZwQueueApcThread
SSDT 84335E40 ZwReadVirtualMemory
SSDT 843CB0A8 ZwRenameKey
SSDT 84327270 ZwSetContextThread
SSDT 843E00A8 ZwSetInformationKey
SSDT 843274C8 ZwSetInformationProcess
SSDT 843272E8 ZwSetInformationThread
SSDT 84327720 ZwSetValueKey
SSDT 84327450 ZwSuspendProcess
SSDT 84335020 ZwSuspendThread
SSDT 84327540 ZwTerminateProcess
SSDT 84327360 ZwTerminateThread
SSDT 84335EB8 ZwWriteVirtualMemory
---- Kernel code sections - GMER 1.0.13 ----
.text ntoskrnl.exe!_abnormal_termination + 451 804E2AAD 7 Bytes [ 75, 32, 84, 60, 73, 32, 84 ]
---- User code sections - GMER 1.0.13 ----
.text C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe[1924] kernel32.dll!CreateThread + 1A 7C810651 4 Bytes [ AB, FA, C3, 83 ]
.text C:\Archivos de programa\MSN Messenger\msnmsgr.exe[2636] kernel32.dll!SetUnhandledExceptionFilter 7C84467D 5 Bytes JMP 004DE392 C:\Archivos de programa\MSN Messenger\msnmsgr.exe
---- Kernel IAT/EAT - GMER 1.0.13 ----
IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\ndiswan.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\raspppoe.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\psched.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\Drivers\NDProxy.SYS[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\tcpip.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\wanarp.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\arp1394.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
IAT \SystemRoot\System32\DRIVERS\arp1394.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisRegisterProtocol] 84335D58
IAT \SystemRoot\System32\DRIVERS\ndisuio.sys[NDIS.SYS!NdisDeregisterProtocol] 84335C60
---- Devices - GMER 1.0.13 ----
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [EDE87F76] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [EDE86812] aswMon2.SYS
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\Ip IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\Ip IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\Ip IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\Ip IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\Ip IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\Ip IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\Ip IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\Ip IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\Ip IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\Ip IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\Ip IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Ip IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\Tcp IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\Tcp IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\Tcp IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\Tcp IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\Tcp IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\Tcp IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Tcp IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\Udp IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\Udp IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\Udp IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\Udp IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\Udp IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\Udp IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\Udp IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\Udp IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\Udp IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\Udp IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\Udp IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\Udp IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\RawIp IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\RawIp IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\RawIp IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\RawIp IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\RawIp IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\RawIp IRP_MJ_PNP 8407F7C0
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_NAMED_PIPE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CLOSE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_READ [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_WRITE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_EA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_FLUSH_BUFFERS [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_VOLUME_INFORMATION [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_DIRECTORY_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_FILE_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_INTERNAL_DEVICE_CONTROL [F770D2C0] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SHUTDOWN [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_LOCK_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CLEANUP [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_CREATE_MAILSLOT [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_SECURITY [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_POWER [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SYSTEM_CONTROL [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_DEVICE_CHANGE [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_QUERY_QUOTA [F770D8E6] aswTdi.SYS
AttachedDevice \Driver\Tcpip \Device\RawIp IRP_MJ_SET_QUOTA [F770D8E6] aswTdi.SYS
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE 840612A8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE_NAMED_PIPE 840622D0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLOSE 84064520
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_READ 8407C850
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_WRITE 8429E2F0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_INFORMATION 8427B6E0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_INFORMATION 840783E8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_EA 84078528
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_EA 840792D8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_FLUSH_BUFFERS 840793B0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_VOLUME_INFORMATION 840794C0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_VOLUME_INFORMATION 840795C8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DIRECTORY_CONTROL 84079698
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_FILE_SYSTEM_CONTROL 840798D8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CONTROL 8407A9D0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_INTERNAL_DEVICE_CONTROL 8407AAC8
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SHUTDOWN 8407AC28
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_LOCK_CONTROL 8407B678
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CLEANUP 8407E1E0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_CREATE_MAILSLOT 8407C978
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_SECURITY 8407CD10
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_SECURITY 8407CED0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_POWER 8407D938
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SYSTEM_CONTROL 8407DD90
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_DEVICE_CHANGE 8407E918
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_QUERY_QUOTA 8407EEC0
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_SET_QUOTA 8407F320
Device \Driver\Tcpip \Device\IPMULTICAST IRP_MJ_PNP 8407F7C0
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_NAMED_PIPE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLOSE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_READ [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_WRITE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_EA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_INTERNAL_DEVICE_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_MAILSLOT [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_SECURITY [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_POWER [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SYSTEM_CONTROL [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CHANGE [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_QUOTA [F758FE00] SSFS0509.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_NAMED_PIPE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLOSE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_READ [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_WRITE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_EA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL [EDE87F76] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_INTERNAL_DEVICE_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_CREATE_MAILSLOT [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_SECURITY [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_POWER [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SYSTEM_CONTROL [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CHANGE [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_QUERY_QUOTA [EDE86812] aswMon2.SYS
AttachedDevice \FileSystem\Fastfat \Fat IRP_MJ_SET_QUOTA [EDE86812] aswMon2.SYS
---- Files - GMER 1.0.13 ----
ADS C:\Documents and Settings\Adrian\Favoritos\ShinyStat:favicon
---- EOF - GMER 1.0.13 ----