Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
drwtsn32.exe

drwtsn32.exe


Log-Analyse und Auswertung: drwtsn32.exe

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

Antwort
Alt 17.04.2007, 19:17   #1
malamen
 
drwtsn32.exe - Standard

drwtsn32.exe


Hi Leute,
mein Problem ist folgendes:
Seit gestern ist mein Pc immer hängen geblieben wenn ich bestimmte Ordner geöffnet habe. Es lies sich aber immer noch der Taskmanager öffnen wo dann 2 mal drwtsn32.exe geöffnet war. Nachdem ich diesen Prozess beendet habe funktionierte alles wieder ganz normal, bis auf diese bestimmten Ordner halt, da passierte immer noch das obengennante. Über google hab ich dann erfahren das es wahrscheinlich Dr. Watson sein könnte und ich hab deshalb unter HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion den Schlüssel AeDebug gelöscht. Seitdem öffnet sich der Prozess drwtsn32.exe nicht mehr wenn ich diese bestimmten Ordner öffne, aber dafür kommt immer folgende Fehlermeldung: "Die Ausnahme "unknown software exception" (0xc0000094) ist in der Anwendung an der Stelle 0x02f7a65b aufgetreten. Klicken Sie Ok um das Programm zu beenden." und explorer.exe wird kurz beendet und alle Windowsordner ebenfalls. Die möglichkeit das mein System kompromittiert ist(http://www.trojaner-board.de/9005-problem-mit-drwtsn32-exe.html), ist nicht so wahrschinlich oder? WIe krieg ich diese Fehlermeldung weg? Freue mich über jede Hilfe.

mein HijackThis log:
Code:
ATTFilter
Logfile of HijackThis v1.99.1
Scan saved at 20:10:01, on 17.04.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Dokumente und Einstellungen\user\Desktop\Security\AntiVir PersonalEdition Classic\sched.exe
C:\Dokumente und Einstellungen\user\Desktop\Security\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
C:\Programme\Java\jre1.6.0\bin\jusched.exe
C:\Dokumente und Einstellungen\user\Desktop\Security\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\NVIDIA Corporation\nTune\nTuneService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Dokumente und Einstellungen\user\Desktop\Security\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Programme\NVIDIA Corporation\nTune\nTuneCmd.exe" clear
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Dokumente und Einstellungen\user\Desktop\Security\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Clean Traces - C:\Programme\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Programme\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Programme\DAP\dapextie2.htm
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Avira GmbH - C:\Dokumente und Einstellungen\user\Desktop\Security\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Dokumente und Einstellungen\user\Desktop\Security\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Programme\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe
O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Programme\NVIDIA Corporation\nTune\nTuneService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: VideoAcceleratorEngine - Speedbit Ltd. - C:\PROGRA~1\SPEEDB~1\VideoAcceleratorEngine.exe
malamen

Alt 19.04.2007, 16:02   #2
malamen
 
drwtsn32.exe - Standard

drwtsn32.exe


Kann mir niemand helfen?
Naja dann kann wenigstens einer mal mein HijackThis log analysieren ob da sonst alles in ordnung ist.

bye malamen
__________________
Alt 19.04.2007, 16:10   #3
413X65
 
drwtsn32.exe - Standard

drwtsn32.exe


Unbedingt fixen! Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor ones actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

MFG 413X65
__________________
Alt 19.04.2007, 16:13   #4
Sunny
Administrator
> Competence Manager
 
drwtsn32.exe - Standard

drwtsn32.exe


Zitat:
Zitat von 413X65 Beitrag anzeigen
Unbedingt fixen! Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor ones actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

MFG 413X65
BITTE NICHT FIXEN, sonst ist dein Soundtreiber dahin ...

413x65, gib bitte nur Hilfe wenn du dir wirlich bewusst bist was du da tust!
__________________
Anfragen per Email, Profil- oder privater Nachricht werden ignoriert!
Hilfe gibts NUR im Forum!


Stulti est se ipsum sapientem putare.

Alt 19.04.2007, 16:12   #5
undoreal
/// AVZ-Toolkit Guru
 
drwtsn32.exe - Standard

drwtsn32.exe


Hm und hallo..

mache bitte einen scan mit f-secure Blacklight und mit gmer. LogFiles posten.

dann mach einen eScan.

Anleitung in meiner Signatur.

[EDIT]PS:
Zitat:
Unbedingt fixen! Realtek AC97 Audio - Event Monitor. "Sypware" file used surreptitiously monitor ones actions. It is not a sinister one, like remote control programs, but it is being used by Realtek to gather data about customers

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

Den Eintrag NICHT fixen ! ! !


Gruß

Undoreal

__________________
- Sämtliche Hilfestellungen im Forum werden ohne Gewährleistung oder Haftung gegeben -
Alt 19.04.2007, 16:21   #6
Apocalypt
 
drwtsn32.exe - Standard

drwtsn32.exe


Hi
@413X65:
Ich glaube du machts den Fehler den ich vorher auch gemacht habe Du hältst dich an die HijackThis OnlineLogfileauswertung.

Alt 19.04.2007, 21:54   #7
malamen
 
drwtsn32.exe - Standard

drwtsn32.exe


@Alle
Danke für die schnellen Antworten!

@[Gc]Sunny und undoreal
hatte ich sowieso nich gefixt, wusste ich auch! Trozdem danke für die warnung

@undoreal

hier die logs:
f-secure Blacklight:
Code:
ATTFilter
04/19/07 22:00:34 [Info]: BlackLight Engine 1.0.61 initialized
04/19/07 22:00:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
04/19/07 22:00:34 [Note]: 7019 4
04/19/07 22:00:34 [Note]: 7005 0
04/19/07 22:00:36 [Note]: 7006 0
04/19/07 22:00:36 [Note]: 7011 1812
04/19/07 22:00:37 [Note]: 7026 0
04/19/07 22:00:37 [Note]: 7026 0
04/19/07 22:00:39 [Note]: FSRAW library version 1.7.1021
04/19/07 22:05:04 [Note]: 2000 1012
04/19/07 22:05:12 [Note]: 7007 0
eScan:
(überall bei den "[...]"gekürtzt hoffe es reicht aus)
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Header 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   

Microsoft Windows XP [Version 5.1.2600]
Thu Apr 19 18:46:42 2007 => Version 9.1.9 
Thu Apr 19 18:10:31 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 18:15:37 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 18:23:46 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 18:44:40 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 18:45:35 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 18:46:21 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 21:07:16 2007 => Virus-Datenbank Datum: 4/19/2007
Thu Apr 19 21:13:17 2007 => Virus-Datenbank Datum: 4/19/2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Infektionsmeldungen 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Thu Apr 19 17:53:29 2007 => System found infected with cws.loadadv.400 Browser Hijacker (hammer.exe)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 17:53:29 2007 => System found infected with hotbar Spyware/Adware (games.lnk)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 17:53:29 2007 => System found infected with web3000 Spyware/Adware (fsg.exe)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 18:28:50 2007 => System found infected with cws.loadadv.400 Browser Hijacker (hammer.exe)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 18:28:50 2007 => System found infected with hotbar Spyware/Adware (games.lnk)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 18:28:50 2007 => System found infected with web3000 Spyware/Adware (fsg.exe)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 18:51:48 2007 => System found infected with cws.loadadv.400 Browser Hijacker (hammer.exe)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 18:51:48 2007 => System found infected with hotbar Spyware/Adware (games.lnk)! Action taken: Keine Aktion vorgenommen.
Thu Apr 19 18:51:49 2007 => System found infected with web3000 Spyware/Adware (fsg.exe)! Action taken: Keine Aktion vorgenommen.
~~~~~~~~~~~ 
Dateien 
~~~~~~~~~~~ 
~~~~ Infected files 
~~~~~~~~~~~ 
[...]
~~~~~~~~~~~ 
~~~~ Tagged files 
~~~~~~~~~~~ 
[...]
~~~~~~~~~~~ 
~~~~ Offending files 
~~~~~~~~~~~ 
[...]
~~~~~~~~~~~ 
Ordner 
~~~~~~~~~~~ 
[...]
~~~~~~~~~~~ 
Registry 
~~~~~~~~~~~ 
Thu Apr 19 17:53:27 2007 => Offending Key found: HKCU\Software\cain !!!
Thu Apr 19 17:53:27 2007 => Offending Key found: HKCU\\magnet !!!
Thu Apr 19 18:28:48 2007 => Offending Key found: HKCU\Software\cain !!!
Thu Apr 19 18:28:48 2007 => Offending Key found: HKCU\\magnet !!!
Thu Apr 19 18:51:47 2007 => Offending Key found: HKCU\Software\cain !!!
Thu Apr 19 18:51:47 2007 => Offending Key found: HKCU\\magnet !!!
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Diverses 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
~~~~~~~~~~~~~~~~~~~~~~ 
Prozesse und Module 
~~~~~~~~~~~~~~~~~~~~~~ 
~~~~~~~~~~~~~~~~~~~~~~ 
Scanfehler 
~~~~~~~~~~~~~~~~~~~~~~ 
Thu Apr 19 20:42:02 2007 => C:\Programme\Nero\Nero 7\Nero Mobile\SetupNeroMobile.exe nicht gescannt. Wahrscheinlich durch Passwort geschützt...
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 
Statistiken: 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Thu Apr 19 18:10:31 2007 => Gefundene Viren: 42
Thu Apr 19 18:44:40 2007 => Gefundene Viren: 33
Thu Apr 19 21:07:16 2007 => Gefundene Viren: 96
Thu Apr 19 18:10:31 2007 => Anzahl Fehler: 53
Thu Apr 19 18:44:40 2007 => Anzahl Fehler: 53
Thu Apr 19 21:07:16 2007 => Anzahl Fehler: 56
Thu Apr 19 18:10:31 2007 => Dauer des Scans bisher: 00:17:34
Thu Apr 19 18:44:40 2007 => Dauer des Scans bisher: 00:20:19
Thu Apr 19 21:07:16 2007 => Dauer des Scans bisher: 02:20:12
Thu Apr 19 18:10:31 2007 => Gescannte Dateien: 73450
Thu Apr 19 18:44:40 2007 => Gescannte Dateien: 73464
Thu Apr 19 21:07:16 2007 => Gescannte Dateien: 125952
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Scan-Optionen 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~   
Thu Apr 19 17:48:08 2007 => Specherüberprüfung: Aktiviert
Thu Apr 19 18:23:58 2007 => Specherüberprüfung: Aktiviert
Thu Apr 19 18:46:42 2007 => Specherüberprüfung: Aktiviert
Thu Apr 19 17:48:08 2007 => Registry Überprüfung: Aktiviert
Thu Apr 19 18:23:58 2007 => Registry Überprüfung: Aktiviert
Thu Apr 19 18:46:42 2007 => Registry Überprüfung: Aktiviert
Thu Apr 19 17:48:08 2007 => System-Ordner Überprüfung: Aktiviert
Thu Apr 19 18:23:58 2007 => System-Ordner Überprüfung: Aktiviert
Thu Apr 19 18:46:42 2007 => System-Ordner Überprüfung: Aktiviert
Thu Apr 19 17:48:08 2007 => Überprüfung der Systembereiche: Deaktiviert
Thu Apr 19 18:23:58 2007 => Überprüfung der Systembereiche: Deaktiviert
Thu Apr 19 18:46:42 2007 => Überprüfung der Systembereiche: Deaktiviert
Thu Apr 19 17:48:08 2007 => Überprüfung der Dienste: Aktiviert
Thu Apr 19 18:23:58 2007 => Überprüfung der Dienste: Aktiviert
Thu Apr 19 18:46:42 2007 => Überprüfung der Dienste: Aktiviert
Thu Apr 19 17:48:08 2007 => Überprüfung der Festplatten: Deaktiviert
Thu Apr 19 18:23:58 2007 => Überprüfung der Festplatten: Deaktiviert
Thu Apr 19 18:46:42 2007 => Überprüfung der Festplatten: Deaktiviert
Thu Apr 19 17:48:08 2007 => Überprüfung aller Festplatten :Aktiviert
Thu Apr 19 18:23:58 2007 => Überprüfung aller Festplatten :Aktiviert
Thu Apr 19 18:46:42 2007 => Überprüfung aller Festplatten :Aktiviert
gmer folg gleich
malamen

Alt 19.04.2007, 22:35   #8
malamen
 
drwtsn32.exe - Standard

drwtsn32.exe


gmer(teil1):
Code:
ATTFilter
GMER 1.0.11.11384 - http://www.gmer.net
Rootkit 2007-04-19 21:20:33
Windows 5.1.2600 Service Pack 2

---- System - GMER 1.0.11 ----

SSDT    sptd.sys
ZwCreateKey
SSDT    sptd.sys                                                                                                                                                                                                                                                                                                                                                                   
ZwEnumerateKey
SSDT    sptd.sys
ZwEnumerateValueKey
SSDT    sptd.sys
ZwOpenKey
SSDT    sptd.sys
ZwQueryKey
SSDT    sptd.sys
ZwQueryValueKey
SSDT    sptd.sys
ZwSetValueKey

---- Devices - GMER 1.0.11 ----

Device  \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_READ
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA
89DC41D8
Device  \FileSystem\Ntfs \Ntfs IRP_MJ_PNP
89DC41D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CREATE
89D181D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_CLOSE
89D181D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL
89D181D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D181D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_POWER
89D181D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL
89D181D8
Device  \Driver\usbohci \Device\USBPDO-0 IRP_MJ_PNP
89D181D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL 
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL 
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP 
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL
89DC61D8
Device  \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP
89DC61D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CREATE
89D171D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_CLOSE
89D171D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL
89D171D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D171D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_POWER
89D171D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL
89D171D8
Device  \Driver\usbehci \Device\USBPDO-1 IRP_MJ_PNP
89D171D8
Device  \Driver\NetBT \Device\NetBT_Tcpip_{2BFA666F-E338-428B-AFEC-7AEABE6E4680}
IRP_MJ_CREATE
890101D8
Device  \Driver\NetBT \Device\NetBT_Tcpip_{2BFA666F-E338-428B-AFEC-7AEABE6E4680}
IRP_MJ_CLOSE
890101D8
Device  \Driver\NetBT \Device\NetBT_Tcpip_{2BFA666F-E338-428B-AFEC-7AEABE6E4680}
IRP_MJ_DEVICE_CONTROL
890101D8
Device  \Driver\NetBT \Device\NetBT_Tcpip_{2BFA666F-E338-428B-AFEC-7AEABE6E4680} IRP_MJ_INTERNAL_DEVICE_CONTROL
890101D8
Device  \Driver\NetBT \Device\NetBT_Tcpip_{2BFA666F-E338-428B-AFEC-7AEABE6E4680} IRP_MJ_CLEANUP
890101D8
Device  \Driver\NetBT \Device\NetBT_Tcpip_{2BFA666F-E338-428B-AFEC-7AEABE6E4680} IRP_MJ_PNP
890101D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP
89D561D8
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL
89D16350
Device  \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP
89D16350
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER 
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP
89D561D8
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL
89D16350
Device  \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP
89D16350
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CREATE
89D551D8
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_CLOSE
89D551D8
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_DEVICE_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_POWER
89D551D8
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_SYSTEM_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-3 IRP_MJ_PNP
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL
89D551D8
Device  \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP
89D551D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CREATE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_READ
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_WRITE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_FLUSH_BUFFERS
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SHUTDOWN
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_CLEANUP
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_POWER
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_SYSTEM_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume3 IRP_MJ_PNP
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CREATE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_READ
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_WRITE
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_FLUSH_BUFFERS
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_DEVICE_CONTROL 
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SHUTDOWN
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_CLEANUP
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_POWER
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_SYSTEM_CONTROL 
89D561D8
Device  \Driver\Ftdisk \Device\HarddiskVolume4 IRP_MJ_PNP
89D561D8
Device  \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CREATE
890101D8
Device  \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLOSE
890101D8
Device  \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_DEVICE_CONTROL
890101D8
Device  \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_INTERNAL_DEVICE_CONTROL
890101D8
Device  \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_CLEANUP
890101D8
Device  \Driver\NetBT \Device\NetBt_Wins_Export IRP_MJ_PNP
890101D8
Device  \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CREATE
890101D8
Device  \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLOSE
890101D8
Device  \Driver\NetBT \Device\NetbiosSmb IRP_MJ_DEVICE_CONTROL
890101D8
Device  \Driver\NetBT \Device\NetbiosSmb IRP_MJ_INTERNAL_DEVICE_CONTROL
890101D8
Device  \Driver\NetBT \Device\NetbiosSmb IRP_MJ_CLEANUP
890101D8
Device  \Driver\NetBT \Device\NetbiosSmb IRP_MJ_PNP
890101D8
Device  \Driver\00000435 \Device\0000004d IRP_MJ_POWER
[BA6DFD74] sptd.sys
Device  \Driver\00000435 \Device\0000004d IRP_MJ_SYSTEM_CONTROL
[BA6F92A2] sptd.sys
Device  \Driver\00000435 \Device\0000004d IRP_MJ_PNP
[BA6FA228] sptd.sys
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CREATE
89D181D8
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_CLOSE
89D181D8
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_DEVICE_CONTROL
89D181D8
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D181D8
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_POWER
89D181D8
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_SYSTEM_CONTROL
89D181D8
Device  \Driver\usbohci \Device\USBFDO-0 IRP_MJ_PNP
89D181D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_CREATE
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_CREATE_NAMED_PIPE
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_CLOSE
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_READ
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_WRITE
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_QUERY_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SET_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_QUERY_EA 
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SET_EA
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_FLUSH_BUFFERS
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_QUERY_VOLUME_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SET_VOLUME_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_DIRECTORY_CONTROL
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_FILE_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SHUTDOWN
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_LOCK_CONTROL
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_CLEANUP
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_CREATE_MAILSLOT
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_QUERY_SECURITY 
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SET_SECURITY
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_POWER
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_DEVICE_CHANGE
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_QUERY_QUOTA
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_SET_QUOTA
89DC51D8
Device  \Driver\nvata \Device\0000006d IRP_MJ_PNP
89DC51D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_CREATE
89D171D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_CLOSE
89D171D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_DEVICE_CONTROL
89D171D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D171D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_POWER
89D171D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_SYSTEM_CONTROL
89D171D8
Device  \Driver\usbehci \Device\USBFDO-1 IRP_MJ_PNP
89D171D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_CREATE 
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_CREATE_NAMED_PIPE
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_CLOSE
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_READ 
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_WRITE
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_QUERY_INFORMATION 
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SET_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_QUERY_EA
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SET_EA 
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_FLUSH_BUFFERS   
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_QUERY_VOLUME_INFORMATION  
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SET_VOLUME_INFORMATION 
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_DIRECTORY_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_FILE_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SHUTDOWN
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_LOCK_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_CLEANUP
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_CREATE_MAILSLOT
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_QUERY_SECURITY 
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SET_SECURITY
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_POWER
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_DEVICE_CHANGE
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_QUERY_QUOTA
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_SET_QUOTA
89DC51D8
Device  \Driver\nvata \Device\NvAta0 IRP_MJ_PNP
89DC51D8
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_NAMED_PIPE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLOSE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_WRITE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_EA
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_EA 
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FLUSH_BUFFERS
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_VOLUME_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_VOLUME_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DIRECTORY_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_FILE_SYSTEM_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_INTERNAL_DEVICE_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SHUTDOWN
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_LOCK_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CLEANUP
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_CREATE_MAILSLOT
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_SECURITY
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_SECURITY
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_POWER
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SYSTEM_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_DEVICE_CHANGE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_QUERY_QUOTA
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_SET_QUOTA
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_PNP
8937E980
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_CREATE
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_CREATE_NAMED_PIPE
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_CLOSE 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_READ
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_WRITE
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_QUERY_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SET_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_QUERY_EA
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SET_EA 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_FLUSH_BUFFERS
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_QUERY_VOLUME_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SET_VOLUME_INFORMATION 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_DIRECTORY_CONTROL  
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_FILE_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SHUTDOWN
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_LOCK_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_CLEANUP 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_CREATE_MAILSLOT 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_QUERY_SECURITY 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SET_SECURITY 
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_POWER  
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_DEVICE_CHANGE
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_QUERY_QUOTA
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_SET_QUOTA
89DC51D8
Device  \Driver\nvata \Device\NvAta1 IRP_MJ_PNP 
89DC51D8
malamen

Alt 19.04.2007, 22:36   #9
malamen
 
drwtsn32.exe - Standard

drwtsn32.exe


gmer(teil2):
Code:
ATTFilter
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_NAMED_PIPE  
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLOSE  
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_WRITE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_EA
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_EA 
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FLUSH_BUFFERS
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_VOLUME_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_VOLUME_INFORMATION
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DIRECTORY_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_FILE_SYSTEM_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_INTERNAL_DEVICE_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SHUTDOWN
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_LOCK_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CLEANUP 
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_CREATE_MAILSLOT
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_SECURITY
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_SECURITY
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_POWER
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SYSTEM_CONTROL
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_DEVICE_CHANGE
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_QUERY_QUOTA
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_SET_QUOTA
8937E980
Device  \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_PNP
8937E980
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_CREATE
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_CREATE_NAMED_PIPE
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_CLOSE
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_READ
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_WRITE
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_QUERY_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SET_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_QUERY_EA
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SET_EA
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_FLUSH_BUFFERS
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_QUERY_VOLUME_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SET_VOLUME_INFORMATION
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_DIRECTORY_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_FILE_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_INTERNAL_DEVICE_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SHUTDOWN
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_LOCK_CONTROL 
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_CLEANUP
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_CREATE_MAILSLOT
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_QUERY_SECURITY
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SET_SECURITY 
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_POWER
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SYSTEM_CONTROL
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_DEVICE_CHANGE
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_QUERY_QUOTA
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_SET_QUOTA
89DC51D8
Device  \Driver\nvata \Device\NvAta2 IRP_MJ_PNP
89DC51D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_CREATE
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_READ
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_WRITE
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_FLUSH_BUFFERS
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_INTERNAL_DEVICE_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_SHUTDOWN
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_CLEANUP
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_POWER
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_SYSTEM_CONTROL
89D561D8
Device  \Driver\Ftdisk \Device\FtControl IRP_MJ_PNP
89D561D8
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_CREATE
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_CLOSE
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_POWER
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51Port5Path0Target0Lun0 IRP_MJ_PNP
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_CREATE
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_CLOSE
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_DEVICE_CONTROL
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_INTERNAL_DEVICE_CONTROL
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_POWER
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_SYSTEM_CONTROL
89D157C0
Device  \Driver\aixjfbc5 \Device\Scsi\aixjfbc51 IRP_MJ_PNP
89D157C0
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_CREATE
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_CLOSE
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_READ
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_INFORMATION
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_SET_INFORMATION
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_QUERY_VOLUME_INFORMATION
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_DIRECTORY_CONTROL
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_FILE_SYSTEM_CONTROL
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_DEVICE_CONTROL
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_SHUTDOWN
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_LOCK_CONTROL 
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_CLEANUP
88FFB1D8
Device  \FileSystem\Cdfs \Cdfs IRP_MJ_PNP
88FFB1D8

---- Registry - GMER 1.0.11 ----

Reg     \Registry\USER\S-1-5-21-1004336348-1078081533-725345543-1003\Software\SecuROM\!CAUTION! NEVER DELETE OR CHANGE ANY KEY@??
0x30 0x00 0x75 0xA3 ...
Reg     \Registry\USER\S-1-5-21-1004336348-1078081533-725345543-1003\Software\SecuROM\!CAUTION! NEVER DELETE OR CHANGE ANY KEY@??
0x6C 0xD3 0xF9 0xE3 ...

---- Files - GMER 1.0.11 ----

ADS     C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:8FB6501C  
ADS     ... 
ADS     C:\Dokumente und Einstellungen\user\Lokale Einstellungen\Anwendungsdaten\Microsoft\Messenger\XXXXXXXXX@msn.com\SharingMetadata\XXXXXXXXX@oleco.net\DFSR\Staging\CS{5CF787A4-91EB-AA34-DB03-E952FB185476}\01\10-{5CF787A4-91EB-AA34-DB03-E952FB185476}-v1-{55EE03DD-AF23-423C-ABCC-F267DCC2C44F}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS  

---- EOF - GMER 1.0.11 ----
malamen

Alt 19.04.2007, 22:45   #10
undoreal
/// AVZ-Toolkit Guru
 
drwtsn32.exe - Standard

drwtsn32.exe


Zitat:
(überall bei den "[...]"gekürtzt hoffe es reicht aus)
du hast das wichtigste weggekürzt. Poste bitte ienfach das log hier. Und wenn möglich ohne blödes Textfeld..

mfg

Undoreal
__________________
- Sämtliche Hilfestellungen im Forum werden ohne Gewährleistung oder Haftung gegeben -
Antwort

Themen zu drwtsn32.exe
adobe, antivir, avira, bho, desktop, drwtsn32.exe, einstellungen, excel, fehlermeldung, google, gservice, hijack, hijackthis, hijackthis log, hängen, internet, internet explorer, logfile, problem, programm, prozess, rundll, security, software, system, taskmanager, traces, windows, windows xp


« KeyLogger... | Würdet ihr bitte den Log auswerten? »


Ähnliche Themen: drwtsn32.exe


  1. problem mit drwtsn32.exe
    Log-Analyse und Auswertung - 03.05.2009 (2)
  2. explorer.exe und drwtsn32.exe
    Plagegeister aller Art und deren Bekämpfung - 28.04.2009 (3)
  3. drwtsn32.exe/explorer.exe Problem
    Log-Analyse und Auswertung - 14.01.2009 (0)
  4. drwtsn32.exe
    Plagegeister aller Art und deren Bekämpfung - 22.09.2008 (1)
  5. drwtsn32.exe und explorer.exe
    Log-Analyse und Auswertung - 30.08.2008 (5)
  6. drwtsn32.exe
    Log-Analyse und Auswertung - 11.08.2008 (1)
  7. explorer.exe und drwtsn32
    Log-Analyse und Auswertung - 19.12.2007 (1)
  8. Fehlermeldung drwtsn32.exe
    Log-Analyse und Auswertung - 07.12.2007 (1)
  9. drwtsn32.log 6,4 GB?
    Plagegeister aller Art und deren Bekämpfung - 15.11.2007 (1)
  10. drwtsn32.exe Problem
    Log-Analyse und Auswertung - 26.06.2007 (5)
  11. Drastischer Leistungsverlust, drwtsn32 ??
    Log-Analyse und Auswertung - 26.01.2007 (5)
  12. drwtsn32.exe
    Plagegeister aller Art und deren Bekämpfung - 28.05.2006 (1)
  13. drwtsn32.log 420 MB???
    Plagegeister aller Art und deren Bekämpfung - 03.12.2005 (6)
  14. drwtsn32
    Log-Analyse und Auswertung - 17.09.2005 (2)
  15. drwtsn32
    Alles rund um Windows - 16.09.2005 (1)
  16. drwtsn32.exe
    Alles rund um Windows - 18.07.2005 (0)
  17. Mal wieder drwtsn32.exe
    Alles rund um Windows - 13.04.2005 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema drwtsn32.exe - Hi Leute, mein Problem ist folgendes: Seit gestern ist mein Pc immer hängen geblieben wenn ich bestimmte Ordner geöffnet habe. Es lies sich aber immer noch der Taskmanager öffnen wo - drwtsn32.exe...
Archiv
Du betrachtest: drwtsn32.exe auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132