09.11.2006, 21:03
Gmerem sprawdzalem - wszystko ok
[Aby zobaczyć linki, zarejestruj się tutaj]
Cytat: GMER 1.0.10.10122 -[Aby zobaczyć linki, zarejestruj się tutaj]
Rootkit 2006-11-09 21:00:01
Windows 5.1.2600 Dodatek Service Pack 2
---- System - GMER 1.0.10 ----
SSDTsptd.sys ZwCreateKey
SSDTsptd.sys ZwEnumerateKey
SSDTsptd.sys ZwEnumerateValueKey
SSDTsptd.sys ZwOpenKey
SSDT??Crogram FilesGrisoftAVG Anti-Spyware 7.5guard.sysZwOpenProcess
SSDTsptd.sys ZwQueryKey
SSDTsptd.sys ZwQueryValueKey
SSDTsptd.sys ZwSetValueKey
SSDT??C
---- Devices - GMER 1.0.10 ----
DeviceFileSystemNtfs Ntfs IRP_MJ_CREATE 828F81D8
DeviceDriverusbuhci DeviceUSBPDO-0 IRP_MJ_CREATE 825521D8
DeviceDriver\00000109 Device\00000051 IRP_MJ_SYSTEM_CONTROL[F7383DB6]sptd.sys
DeviceDriver\00000109 Device\00000051 IRP_MJ_DEVICE_CHANGE [F739973C]sptd.sys
DeviceDriver\00000109 Device\00000051 IRP_MJ_PNP_POWER [F739277E]sptd.sys
DeviceDriverdmio DeviceDmControlDmIoDaemon IRP_MJ_CREATE829671D8
DeviceDriverdmio DeviceDmControlDmConfig IRP_MJ_CREATE829671D8
DeviceDriverdmio DeviceDmControlDmPnP IRP_MJ_CREATE 829671D8
DeviceDriverdmio DeviceDmControlDmInfo IRP_MJ_CREATE829671D8
DeviceDriverusbuhci DeviceUSBPDO-1 IRP_MJ_CREATE 825521D8
DeviceDriverFtdisk DeviceHarddiskVolume1 IRP_MJ_CREATE 828FA1D8
DeviceDriverFtdisk DeviceHarddiskVolume2 IRP_MJ_CREATE 828FA1D8
DeviceDriverCdrom DeviceCdRom0 IRP_MJ_CREATE 8257C1D8
DeviceDriverCdrom DeviceCdRom1 IRP_MJ_CREATE 8257C1D8
DeviceDriveratapi DeviceIdeIdeDeviceP1T1L0-17 IRP_MJ_CREATE 828F91D8
DeviceDriveratapi DeviceIdeIdeDeviceP1T1L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL[F7790222]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdeDeviceP1T1L0-17 IRP_MJ_SHUTDOWN [F779044A]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdePort0 IRP_MJ_CREATE 828F91D8
DeviceDriveratapi DeviceIdeIdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL[F7790222]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdePort0 IRP_MJ_SHUTDOWN [F779044A]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdeDeviceP0T0L0-3 IRP_MJ_CREATE828F91D8
DeviceDriveratapi DeviceIdeIdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL [F7790222]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdeDeviceP0T0L0-3 IRP_MJ_SHUTDOWN[F779044A]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdePort1 IRP_MJ_CREATE 828F91D8
DeviceDriveratapi DeviceIdeIdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL[F7790222]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdePort1 IRP_MJ_SHUTDOWN [F779044A]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdeDeviceP1T0L0-f IRP_MJ_CREATE828F91D8
DeviceDriveratapi DeviceIdeIdeDeviceP1T0L0-f IRP_MJ_INTERNAL_DEVICE_CONTROL [F7790222]AnyDVD.sys
DeviceDriveratapi DeviceIdeIdeDeviceP1T0L0-f IRP_MJ_SHUTDOWN[F779044A]AnyDVD.sys
DeviceDriverCdrom DeviceCdRom2 IRP_MJ_CREATE 8257C1D8
DeviceDriverNetBT DeviceNetBt_Wins_Export IRP_MJ_CREATE823DE990
DeviceDriverNetBT DeviceNetbiosSmb IRP_MJ_CREATE 823DE990
DeviceDriverusbuhci DeviceUSBFDO-0 IRP_MJ_CREATE 825521D8
DeviceDriverusbuhci DeviceUSBFDO-1 IRP_MJ_CREATE 825521D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_CREATE823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_CLOSEIRP_MJ_READ823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_WRITE 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SET_INFORMATION 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_QUERY_EA823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SET_EA823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SHUTDOWN823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_LOCK_CONTROL823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_CLEANUP 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_QUERY_SECURITY823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SET_SECURITY823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_POWER 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_SET_QUOTA 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_PNP 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanDatagramReceiver IRP_MJ_PNP_POWER 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_CREATE823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_CLOSEIRP_MJ_READ823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_WRITE 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_QUERY_INFORMATION 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SET_INFORMATION 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_QUERY_EA823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SET_EA823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_FLUSH_BUFFERS 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_DIRECTORY_CONTROL 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_DEVICE_CONTROL823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SHUTDOWN823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_LOCK_CONTROL823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_CLEANUP 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_CREATE_MAILSLOT 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_QUERY_SECURITY823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SET_SECURITY823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_POWER 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SYSTEM_CONTROL823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_DEVICE_CHANGE 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_QUERY_QUOTA 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_SET_QUOTA 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_PNP 823C51D8
DeviceFileSystemMRxSmb DeviceLanmanRedirector IRP_MJ_PNP_POWER 823C51D8
DeviceDriverFtdisk DeviceFtControl IRP_MJ_CREATE 828FA1D8
DeviceDriverNetBT DeviceNetBT_Tcpip_{6B896EC0-01C4-46A5-B816-A1A213B1B22E} IRP_MJ_CREATE 823DE990
DeviceDriveragydapd9 DeviceScsiagydapd91Port2Path0Target0Lun0 IRP_MJ_CREATE 8253A1D8
DeviceDriveragydapd9 DeviceScsiagydapd91Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL[F7790222]AnyDVD.sys
DeviceDriveragydapd9 DeviceScsiagydapd91Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN [F779044A]AnyDVD.sys
DeviceDriveragydapd9 DeviceScsiagydapd91 IRP_MJ_CREATE8253A1D8
DeviceDriveragydapd9 DeviceScsiagydapd91 IRP_MJ_INTERNAL_DEVICE_CONTROL [F7790222]AnyDVD.sys
DeviceDriveragydapd9 DeviceScsiagydapd91 IRP_MJ_SHUTDOWN[F779044A]AnyDVD.sys
DeviceFileSystemFastfat Fat IRP_MJ_CREATE 8236B990
DeviceFileSystemCdfs Cdfs IRP_MJ_CREATE 8238E990