hi leute,

ich benötige mal eure hilfe. ich habe hier schon im forum gelesen und auch einige ratschläge befolgt. seit einigen tagen öffnet der internet explorer immer ein neues fenster mit werbung. alles aber unterschiedliche werbung - angefangen von Der Club oder Party Poker bis zu reisewerbung.

mein AV meldet ein virus namens TR/Obuscated.BL
dafaufhin hab ich schon hijack ausgeführt schon im abgesicherten modus gestartet und das verzeichnis bzw. den ordner gelöscht.

nun bin ich mir nicht sicher ob der virus wirklich entfernt wurde, da ab und zu meine maus bzw. mein mauszeiger extrem langsam reagiert. als ob das system ausgelastet ist, was es aber defenitiv nicht ist. ist das eventuell auch ein virus? meine maus rattert dann richtig abgehackt über den bildschirm. könnt ihr mir helfen? anbei noch mein hijack log file.

Logfile of HijackThis v1.99.0

[edit]
bitte editiere zukünftig deine links, wie es dir u.a. hier angezeigt wird:
http://www.trojaner-board.de/22771-a...tml#post171958

danke
GUA
[/edit]

ok dann hier nochmal

Logfile of HijackThis v1.99.0
Scan saved at 10:42:04, on 12.01.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Programme\AntiVir PersonalEdition Classic\sched.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\cisvc.exe
C:\Programme\Adobe\Photoshop Elements 4.0\apdproxy.exe
C:\Programme\Firebird\Firebird_1_5\bin\fbguard.exe
C:\Programme\iSaver\iSaverCtrl.exe
C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
C:\progra~1\mcafee\MCAFEE~1\masalert.exe
c:\programme\mcafee.com\agent\mcdetect.exe
C:\Programme\QuickTime\qttask.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\Programme\Messenger\msmsgs.exe
C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWAgent.exe
c:\Programme\Sophos\Sophos Anti-Virus\SAVAdminService.exe
c:\Programme\Sophos\AutoUpdate\ALsvc.exe
C:\Programme\Sophos\AutoUpdate\ALMon.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Firebird\Firebird_1_5\bin\fbserver.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\Programme\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Programme\Java\jre1.5.0_06\bin\jucheck.exe
D:\hijackthis\HijackThis.exe
C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = h**p://www.google.de/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programme\Adobe\Photoshop Elements 4.0\apdproxy.exe"
O4 - HKLM\..\Run: [iSaverCtrl] C:\Programme\iSaver\iSaverCtrl.exe --startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programme\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [_AntiSpyware] c:\progra~1\mcafee\MCAFEE~1\masalert.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [muBlinder] D:\Programme\BitLord\Downloads\muBlinder\muBlinder.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programme\Messenger\msmsgs.exe" /background
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Programme\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: AutoUpdate Monitor.lnk = C:\Programme\Sophos\AutoUpdate\ALMon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_06\bin\ssv.dll (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - h**p://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - h**p://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1166525553484
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - h**p://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1166525493187
O17 - HKLM\System\CCS\Services\Tcpip\..\{86E11974-B075-40E2-991A-5E9955FA6833}: NameServer = 217.237.149.205 217.237.150.188
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O23 - Service: Adobe Active File Monitor V4 - Unknown - C:\Programme\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: AntiVir PersonalEdition Classic Planer - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Firebird Guardian - DefaultInstance - The Firebird Project - C:\Programme\Firebird\Firebird_1_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance - The Firebird Project - C:\Programme\Firebird\Firebird_1_5\bin\fbserver.exe
O23 - Service: McAfee AntiSpyware Service - McAfee, Inc. - c:\progra~1\mcafee\mcafee antispyware\massrv.exe
O23 - Service: McAfee WSC Integration - McAfee, Inc - c:\programme\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
O23 - Service: NBService - Nero AG - D:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Sophos Anti-Virus Statusreporter - Sophos Plc - c:\Programme\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus - Sophos Plc - c:\Programme\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - c:\Programme\Sophos\AutoUpdate\ALsvc.exe

hoffe das es jetzt so rechtens ist. :-)

übrigens findet AV virus jetzt den trojaner in verzeichnis C:\SystemVolumeinformation\...\A0047266.exe

O23 - Service: AntiVir PersonalEdition Classic Planer - Avira GmbH - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard - AVIRA GmbH - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: McAfee AntiSpyware Service - McAfee, Inc. - c:\progra~1\mcafee\mcafee antispyware\massrv.exe
O23 - Service: McAfee WSC Integration - McAfee, Inc - c:\programme\mcafee.com\agent\mcdetect.exe
O23 - Service: McAfee Task Scheduler - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee Personal Firewall Service - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
O23 - Service: Sophos Anti-Virus Statusreporter - Sophos Plc - c:\Programme\Sophos\Sophos Anti-Virus\SAVAdminService.exe
O23 - Service: Sophos Anti-Virus - Sophos Plc - c:\Programme\Sophos\Sophos Anti-Virus\SavService.exe
O23 - Service: Sophos AutoUpdate Service - Sophos Plc - c:\Programme\Sophos\AutoUpdate\ALsvc.exe

Es gibt noch ein paar Antivirusprogramme die in Deiner Sammlung fehlen
Hau alle Virenscanner bis auf einen runter.

C:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE
C:\WINDOWS\system32\SearchIndexer.exe

Du hast Office 2007? Wenn ja, hast Du es aus einer legalen Quelle (Händler) oder aus den Weiten des Internets "besorgt"?

Zitat von MightyMarc

Du hast Office 2007? Wenn ja, hast Du es aus einer legalen Quelle (Händler) oder aus den Weiten des Internets "besorgt"?

hi,
das ist noch die BETA2 version von office 2007, die ich legal bei microsoft geladen habe.

wie gesagt meldet sich jetzt antivir mit der meldung der virus sitze im verzeichnis c:\systemvolumeinformation\...\A0047266.exe

desweiteren ist mein system von zeit zu zeit total ausgelastet obwohl auch im task manager keine auslastung zu erkennen ist. das nerft vielleicht. hat noch jemand vielleicht nen tip?

mathias

Zitat von fossy

wie gesagt meldet sich jetzt antivir mit der meldung der virus sitze im verzeichnis c:\systemvolumeinformation\...\A0047266.exe

Das ist nicht weiter tragisch. Auch wenn Du den vollen Pfad nicht gepostest hast, gehe ich mal davon aus, dass die Datei in der Systemwiederherstellung gelandet ist.

desweiteren ist mein system von zeit zu zeit total ausgelastet obwohl auch im task manager keine auslastung zu erkennen ist.

Erstelle ein Gmer-Log und poste dieses [Anleitung bei Nycomex geklaut]

* Das Programm herunterladen
* Das Programm entpacken. Wenn Du nach dem Entpacken keine Ahnung hast, wo das Programm gelandet ist, kannst Du es mit der Windows-Suchfunktion gmer.exe finden.
* Die gmer.exe gegebenenfalls in Verzeichnis ordentliches Verzeichnis kopieren (z.B. C:\Programme\Gmer)
* Durch Doppelklick auf die .exe-Datei das Programm starten und alle Häkchen wie auf dem Bild gezeigt setzen.
.
.
.
.
* Unten rechts auf Scan klicken. Der Vorgang dauert etwa 2-3 Minuten.
* Nach dem der Scanvorgang zu ende ist, auf Copy klicken um das Log in die Zwischenablage zu kopieren. Es kann nun mit [Strg]+[v] ([Ctrl]+[V]) oder rechter Mausklick -> Einfügen in Dein Posting eingefügt werden.

so hier ist das ergebnis von GMER. hoffe das hier jemand damit was anfangen kann:

GMER 1.0.12.12011 - h**p://www.gmer.net
Rootkit scan 2007-01-15 09:44:29
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.12 ----

SSDT sptd.sys ZwCreateKey
SSDT sptd.sys ZwEnumerateKey
SSDT sptd.sys ZwEnumerateValueKey
SSDT sptd.sys ZwOpenKey
SSDT sptd.sys ZwQueryKey
SSDT sptd.sys ZwQueryValueKey
SSDT sptd.sys ZwSetValueKey

---- Kernel code sections - GMER 1.0.12 ----

.text USBPORT.SYS!DllUnload F941362C 5 Bytes JMP 8182D960

---- User code sections - GMER 1.0.12 ----

.text C:\WINDOWS\system32\searchindexer.exe[2848] kernel32.dll!WriteFile 7C810F9F 7 Bytes JMP 7336671F C:\WINDOWS\system32\mssrch.dll

---- Devices - GMER 1.0.12 ----

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA 81B6C1D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP 81B6C1D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CREATE 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLOSE 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_READ 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_WRITE 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_INFORMATION 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_INFORMATION 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_EA 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_EA 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FLUSH_BUFFERS 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_QUERY_VOLUME_INFORMATION 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SET_VOLUME_INFORMATION 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DIRECTORY_CONTROL 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_FILE_SYSTEM_CONTROL 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_DEVICE_CONTROL 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_SHUTDOWN 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_LOCK_CONTROL 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_CLEANUP 817281D8
Device \FileSystem\Fastfat \FatCdrom IRP_MJ_PNP 817281D8
Device \Driver\00000046 \Device\00000043 IRP_MJ_POWER [F9949D74] sptd.sys
Device \Driver\00000046 \Device\00000043 IRP_MJ_SYSTEM_CONTROL [F99632A2] sptd.sys
Device \Driver\00000046 \Device\00000043 IRP_MJ_PNP [F9964228] sptd.sys
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CREATE 8182B980
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CLOSE 8182B980
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_POWER 8182B980
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL 8182B980
Device \Driver\usbohci \Device\USBPDO-0 IRP_MJ_PNP 8182B980
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL 81B6E1D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP 81B6E1D8
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CREATE 8182C980
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CLOSE 8182C980
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL 8182C980
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182C980
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_POWER 8182C980
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL 8182C980
Device \Driver\usbehci \Device\USBPDO-1 IRP_MJ_PNP 8182C980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_CREATE 8182B980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_CLOSE 8182B980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_POWER 8182B980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_SYSTEM_CONTROL 8182B980
Device \Driver\usbohci \Device\USBPDO-2 IRP_MJ_PNP 8182B980
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP 81BDF1D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 8182F980
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CLOSE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_POWER 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SYSTEM_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_PNP 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER

81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CREATE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_CLOSE 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_POWER 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_SYSTEM_CONTROL 81BDE1D8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T0L0-f IRP_MJ_PNP 81BDE1D8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSE 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_READ 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 8182F980
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 8182F980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE 81853980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE 81853980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP 81853980
Device \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP 81853980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE 81853980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE 81853980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP 81853980
Device \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{60AD07BB-398D-4F16-B7F6-AD59B0AAAB7D} IRP_MJ_CREATE 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{60AD07BB-398D-4F16-B7F6-AD59B0AAAB7D} IRP_MJ_CLOSE 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{60AD07BB-398D-4F16-B7F6-AD59B0AAAB7D} IRP_MJ_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{60AD07BB-398D-4F16-B7F6-AD59B0AAAB7D} IRP_MJ_INTERNAL_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{60AD07BB-398D-4F16-B7F6-AD59B0AAAB7D} IRP_MJ_CLEANUP 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{60AD07BB-398D-4F16-B7F6-AD59B0AAAB7D} IRP_MJ_PNP 81853980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CREATE 8182B980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CLOSE 8182B980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_POWER 8182B980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL 8182B980
Device \Driver\usbohci \Device\USBFDO-0 IRP_MJ_PNP 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_CREATE 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_CLOSE 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_POWER 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL 8182B980
Device \Driver\usbohci \Device\USBFDO-1 IRP_MJ_PNP 8182B980
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP 819D11D8
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_CREATE 8182C980
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_CLOSE 8182C980
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_DEVICE_CONTROL 8182C980
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_INTERNAL_DEVICE_CONTROL 8182C980
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_POWER 8182C980
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_SYSTEM_CONTROL 8182C980
Device \Driver\usbehci \Device\USBFDO-2 IRP_MJ_PNP 8182C980
Device \Driver\NetBT \Device\NetBT_Tcpip_{86E11974-B075-40E2-991A-5E9955FA6833} IRP_MJ_CREATE 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{86E11974-B075-40E2-991A-5E9955FA6833} IRP_MJ_CLOSE 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{86E11974-B075-40E2-991A-5E9955FA6833} IRP_MJ_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{86E11974-B075-40E2-991A-5E9955FA6833} IRP_MJ_INTERNAL_DEVICE_CONTROL 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{86E11974-B075-40E2-991A-5E9955FA6833} IRP_MJ_CLEANUP 81853980
Device \Driver\NetBT \Device\NetBT_Tcpip_{86E11974-B075-40E2-991A-5E9955FA6833} IRP_MJ_PNP 81853980
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA 819D11D8
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP 819D11D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_READ 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL 81BDF1D8
Device \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP 81BDF1D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_CREATE 818C21D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_CLOSE 818C21D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_DEVICE_CONTROL 818C21D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_INTERNAL_DEVICE_CONTROL 818C21D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_POWER 818C21D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_SYSTEM_CONTROL 818C21D8
Device \Driver\aqkbkib0 \Device\Scsi\aqkbkib01 IRP_MJ_PNP 818C21D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_CREATE 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_CLOSE 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_POWER 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1Port2Path0Target0Lun0 IRP_MJ_PNP 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_CREATE 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_CLOSE 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_DEVICE_CONTROL 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_POWER 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_SYSTEM_CONTROL 81B6D1D8
Device \Driver\imagedrv \Device\Scsi\imagedrv1 IRP_MJ_PNP 81B6D1D8
Device \FileSystem\Fastfat \Fat IRP_MJ_CREATE 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_CLOSE 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_READ 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_WRITE 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_EA 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP 817281D8
Device \FileSystem\Fastfat \Fat IRP_MJ_PNP 817281D8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP 81734980
Device \FileSystem\Cdfs \Cdfs IRP_MJ_PNP 81734980

---- EOF - GMER 1.0.12 ----

gruß
mathias

Das Problem wird wohl durch die Searchindexer.exe verursacht. Diese Datei gehört zu Office 12 Beta.
Start > Ausführen > services.msc
Suche dort einen Dienst namens "Windows Search" und deaktiviere ihn.