PDA

View Full Version : URGENTE:presunta infezione da parte del Sasser.exe

TCool a.k.a. TC
12-09-2007, 20:01
ciao a tutti! ho davvero un grosso problema riguardante l'applicazione Isass.exe ke termina in modo regolare con successivo riavvio automatico del pc, attraverso nt authority... e mi pare che questo sasser, ke si maskera da un'applicazione di sistema, mi fa entrare nel pc un casino di virus, malgrado ho il firewall e l'antivirus attivati... non ho mai visto windows così instabile, la maggior parte delle volte devo spegnere il pc dal tasto di accensione xkè si blokka il sistema operativo... il problema non finisce quà... l'altra sera mi sono detto: faccio che formattare tanto non ho problemi.... . Allora mi sono messo a formattare e riaccendendo il pc dopo neanche un giorno mi ritrovo il messaggio di riavvio!!! mi chiedo come mai la formattazzione non l'ha cancellato.... non ce la faccio!!!! vi prego di aiutarmi!!! il pc mi serve in questo periodo come non mai!!!
grazie mille a tutti x le risposteeeeeeeeeeee!!!!!!!!!!!!!!!!!!!! :)
TCool a.k.a. TC
12-09-2007, 21:03
mi sono dimenticaro di dire che molte volte mi da errore di " generic host process win32"....non si ke sia xò......AIUTOOOO! xD
Bugs Bunny
12-09-2007, 21:14
log di hijackthis e righe rosse di gmer
TCool a.k.a. TC
12-09-2007, 21:25
Logfile of HijackThis v1.99.1
Scan saved at 22.23.43, on 12/09/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\Programmi\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Programmi\Trust\Trust MD3100 USB ADSL MODEM\CnxDslTb.exe
C:\Programmi\Eset\nod32kui.exe
C:\WINDOWS\System32\mdm.exe
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\DOCUME~1\TCool\IMPOST~1\Temp\Rar$EX00.531\HijackThis.exe
C:\WINDOWS\SoftwareDistribution\Download\1e5009277eef3710bef74e1ba0a648cd\update\update.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotinfolink.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://login.live.com/ppsecure/sha1auth.srf?lc=1040
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\Trust\Trust MD3100 USB ADSL MODEM\CnxDslTb.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Microsoft Update] C:\WINDOWS\System32\mdm.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Network Security] C:\WINDOWS\System32\NSecurity.exe
O4 - HKCU\..\Run: [Microsoft Update] C:\WINDOWS\System32\mdm.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\MSMSGS.EXE" /background
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{723C82ED-BADC-4F5F-9CC7-726C436D4EBD}: NameServer = 193.12.150.2 212.247.152.2
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
TCool a.k.a. TC
12-09-2007, 21:33
ora ke finisce di scansionare posto il report di gmer..... comunque negli ultimi 10 minuti ho riavviato il pc 7 volte....non ce la faccio +...ke palle.....
TCool a.k.a. TC
12-09-2007, 21:35
GMER 1.0.13.12551 - http://www.gmer.net
Rootkit scan 2007-09-12 22:35:23
Windows 5.1.2600 Service Pack 1


---- System - GMER 1.0.13 ----

SSDT a347bus.sys ZwClose
SSDT a347bus.sys ZwCreateKey
SSDT a347bus.sys ZwCreatePagingFile
SSDT a347bus.sys ZwEnumerateKey
SSDT a347bus.sys ZwEnumerateValueKey
SSDT a347bus.sys ZwOpenFile
SSDT a347bus.sys ZwOpenKey
SSDT \??\C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwOpenProcess
SSDT a347bus.sys ZwQueryKey
SSDT a347bus.sys ZwQueryValueKey
SSDT a347bus.sys ZwSetSystemPowerState
SSDT \??\C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.sys ZwTerminateProcess

---- Kernel code sections - GMER 1.0.13 ----

.text ntdll.dll!NtCreateSection 77F65A21 1 Byte [ E9 ]
.text ntdll.dll!NtCreateSection + 2 77F65A23 3 Bytes [ 12, 0D, FA ]

---- User code sections - GMER 1.0.13 ----

.text C:\DOCUME~1\TCool\IMPOST~1\Temp\Rar$EX00.812\gmer.exe[2908] ntdll.dll!NtCreateSection 77F65A21 1 Byte [ E9 ]
.text C:\DOCUME~1\TCool\IMPOST~1\Temp\Rar$EX00.812\gmer.exe[2908] ntdll.dll!NtCreateSection + 2 77F65A23 3 Bytes [ 12, 0D, FA ]

Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ 81FCFB60

AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE [BA9F4FE2] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_NAMED_PIPE [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_READ [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL [BA9F4BEC] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_INTERNAL_DEVICE_CONTROL [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP [BA9F53D4] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE_MAILSLOT [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_POWER [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SYSTEM_CONTROL [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CHANGE [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA [BA9F567A] amon.sys
AttachedDevice \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA [BA9F567A] amon.sys

Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP 81CB6BA8
Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_READ 81BE6258
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_NAMED_PIPE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLOSE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_READ 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_WRITE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_EA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_EA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FLUSH_BUFFERS 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_VOLUME_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_VOLUME_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DIRECTORY_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_FILE_SYSTEM_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SHUTDOWN 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_LOCK_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CLEANUP 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_CREATE_MAILSLOT 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_SECURITY 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_SECURITY 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_POWER 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SYSTEM_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_DEVICE_CHANGE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_QUERY_QUOTA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_SET_QUOTA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom1 IRP_MJ_PNP 81CB6BA8
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE_NAMED_PIPE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CLOSE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_READ 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_WRITE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_FLUSH_BUFFERS 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DIRECTORY_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_FILE_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SHUTDOWN 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_LOCK_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CLEANUP 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_CREATE_MAILSLOT 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_POWER 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_DEVICE_CHANGE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_QUERY_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_SET_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP1T1L0-17 IRP_MJ_PNP 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_READ 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_NAMED_PIPE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLOSE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_READ 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_WRITE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FLUSH_BUFFERS 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DIRECTORY_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_FILE_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SHUTDOWN 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_LOCK_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CLEANUP 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_CREATE_MAILSLOT 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_POWER 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_DEVICE_CHANGE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_QUERY_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_SET_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 IRP_MJ_PNP 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_READ 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_NAMED_PIPE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLOSE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_READ 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_WRITE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_EA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FLUSH_BUFFERS 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_VOLUME_INFORMATION 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DIRECTORY_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_FILE_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_INTERNAL_DEVICE_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SHUTDOWN 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_LOCK_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CLEANUP 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_CREATE_MAILSLOT 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_SECURITY 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_POWER 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SYSTEM_CONTROL 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_DEVICE_CHANGE 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_QUERY_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_SET_QUOTA 81CBA750
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c IRP_MJ_PNP 81CBA750
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_NAMED_PIPE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLOSE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_READ 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_WRITE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_EA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_EA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FLUSH_BUFFERS 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_VOLUME_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_VOLUME_INFORMATION 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DIRECTORY_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_FILE_SYSTEM_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_INTERNAL_DEVICE_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SHUTDOWN 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_LOCK_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CLEANUP 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_CREATE_MAILSLOT 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_SECURITY 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_SECURITY 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_POWER 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SYSTEM_CONTROL 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_DEVICE_CHANGE 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_QUERY_QUOTA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_SET_QUOTA 81CB6BA8
Device \Driver\Cdrom \Device\CdRom2 IRP_MJ_PNP 81CB6BA8
Device \FileSystem\Srv \Device\LanmanServer IRP_MJ_READ 81C9BEB8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver IRP_MJ_READ 81C63A68
Device \FileSystem\MRxSmb \Device\LanmanRedirector IRP_MJ_READ 81C63A68
Device \FileSystem\Npfs \Device\NamedPipe IRP_MJ_READ 81CAE6A8
Device \FileSystem\Msfs \Device\Mailslot IRP_MJ_READ 81C405D0
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_CREATE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_CREATE_NAMED_PIPE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_CLOSE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_READ 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_WRITE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_QUERY_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SET_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_QUERY_EA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SET_EA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_FLUSH_BUFFERS 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_QUERY_VOLUME_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SET_VOLUME_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_DIRECTORY_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_FILE_SYSTEM_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_INTERNAL_DEVICE_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SHUTDOWN 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_LOCK_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_CLEANUP 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_CREATE_MAILSLOT 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_QUERY_SECURITY 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SET_SECURITY 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_POWER 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SYSTEM_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_DEVICE_CHANGE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_QUERY_QUOTA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_SET_QUOTA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1Port2Path0Target0Lun0 IRP_MJ_PNP 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_CREATE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_CREATE_NAMED_PIPE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_CLOSE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_READ 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_WRITE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_QUERY_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SET_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_QUERY_EA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SET_EA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_FLUSH_BUFFERS 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_QUERY_VOLUME_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SET_VOLUME_INFORMATION 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_DIRECTORY_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_FILE_SYSTEM_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_DEVICE_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_INTERNAL_DEVICE_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SHUTDOWN 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_LOCK_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_CLEANUP 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_CREATE_MAILSLOT 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_QUERY_SECURITY 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SET_SECURITY 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_POWER 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SYSTEM_CONTROL 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_DEVICE_CHANGE 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_QUERY_QUOTA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_SET_QUOTA 81C7C008
Device \Driver\a347scsi \Device\Scsi\a347scsi1 IRP_MJ_PNP 81C7C008
Device \FileSystem\Fs_Rec \FileSystem\UdfsCdRomRecognizer IRP_MJ_READ 81CAD8A8
Device \FileSystem\Fs_Rec \FileSystem\FatCdRomRecognizer IRP_MJ_READ 81CAD8A8
Device \FileSystem\Fs_Rec \FileSystem\CdfsRecognizer IRP_MJ_READ 81CAD8A8
Device \FileSystem\Fs_Rec \FileSystem\FatDiskRecognizer IRP_MJ_READ 81CAD8A8
Device \FileSystem\Fs_Rec \FileSystem\UdfsDiskRecognizer IRP_MJ_READ 81CAD8A8
Device \FileSystem\Cdfs \Cdfs IRP_MJ_READ 81C8AEB0

---- Modules - GMER 1.0.13 ----

Module _________ F848C000-F84A2000 (90112 bytes)

---- Files - GMER 1.0.13 ----

ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\01\10-{609557B6-AD35-BEF2-5733-7690D074EC10}-v1-{54E2562D-A38E-44CD-8F9E-52F6E97F7D30}-v10-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\11\41-{CD09590E-9347-409C-90C6-B0F5A4AFE634}-v11-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v41-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\12\42-{CD09590E-9347-409C-90C6-B0F5A4AFE634}-v12-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v42-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\13\43-{CD09590E-9347-409C-90C6-B0F5A4AFE634}-v13-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v43-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\14\45-{CD09590E-9347-409C-90C6-B0F5A4AFE634}-v14-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v45-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\16\14-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v16-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\16\16-{CD09590E-9347-409C-90C6-B0F5A4AFE634}-v16-{CD09590E-9347-409C-90C6-B0F5A4AFE634}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\17\15-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v17-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v15-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\18\17-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v18-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v17-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\19\16-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v19-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\20\19-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v20-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v19-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\21\20-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v21-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v20-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\22\21-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v22-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v21-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\23\22-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v23-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v22-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\24\23-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v24-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v23-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\25\24-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v25-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\26\25-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v26-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v25-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\27\26-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v27-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\28\27-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v28-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v27-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\29\28-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v29-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v28-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\30\29-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v30-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\31\30-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v31-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v30-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\32\31-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v32-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v31-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\33\32-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v33-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\35\34-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v35-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v34-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{609557B6-AD35-BEF2-5733-7690D074EC10}\36\35-{E192F54D-C13E-4FF1-BB81-07CD98C93C54}-v36-{DD3D2BB8-3F92-4298-969A-066EEB0B4C6C}-v35-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{CBD549EB-D0C6-2F3C-FD79-D2DFAFFBBAD7}\01\14-{CBD549EB-D0C6-2F3C-FD79-D2DFAFFBBAD7}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v14-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{11EE41CC-B47A-8FE1-926D-C42EB83D9CB1}\01\35-{11EE41CC-B47A-8FE1-926D-C42EB83D9CB1}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v35-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{67CE3C20-E826-5062-0C81-54430AA43843}\01\24-{67CE3C20-E826-5062-0C81-54430AA43843}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v24-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{4A94A6DB-CFD1-ABBB-5FCB-69FAAAF0471B}\01\32-{4A94A6DB-CFD1-ABBB-5FCB-69FAAAF0471B}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v32-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{CDDF746D-9B49-DAB8-6CB7-6B5CC09AEE2A}\01\29-{CDDF746D-9B49-DAB8-6CB7-6B5CC09AEE2A}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v29-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{B9FD86D7-6207-FDD6-7277-62F843082EAE}\01\26-{B9FD86D7-6207-FDD6-7277-62F843082EAE}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v26-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{F1E2715D-0990-AD24-730A-0D4E64D0C90F}\01\36-{F1E2715D-0990-AD24-730A-0D4E64D0C90F}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v36-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{EEC40BBB-6C49-B3DE-E60F-40E22D1863BC}\01\39-{EEC40BBB-6C49-B3DE-E60F-40E22D1863BC}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v39-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{5EBED048-FCD7-2FD1-A306-EC9AA4354705}\01\16-{5EBED048-FCD7-2FD1-A306-EC9AA4354705}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v16-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{9006BF90-8D03-9970-3210-AC0AE7F1D98C}\01\11-{9006BF90-8D03-9970-3210-AC0AE7F1D98C}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v11-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{92FCCCA9-D689-76A1-7048-EFF4DEF88659}\01\40-{92FCCCA9-D689-76A1-7048-EFF4DEF88659}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v40-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{92FCCCA9-D689-76A1-7048-EFF4DEF88659}\15\460-{469709DA-1492-4664-B6BD-032A7BE08996}-v315-{469709DA-1492-4664-B6BD-032A7BE08996}-v460-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.rdc.1
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{92FCCCA9-D689-76A1-7048-EFF4DEF88659}\15\460-{469709DA-1492-4664-B6BD-032A7BE08996}-v315-{469709DA-1492-4664-B6BD-032A7BE08996}-v460-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{92FCCCA9-D689-76A1-7048-EFF4DEF88659}\16\461-{469709DA-1492-4664-B6BD-032A7BE08996}-v316-{469709DA-1492-4664-B6BD-032A7BE08996}-v461-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{92FCCCA9-D689-76A1-7048-EFF4DEF88659}\25\626-{469709DA-1492-4664-B6BD-032A7BE08996}-v625-{469709DA-1492-4664-B6BD-032A7BE08996}-v626-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS
ADS C:\Documents and Settings\TCool\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\[email protected]\SharingMetadata\[email protected]\DFSR\Staging\CS{892399EA-78DF-E6B5-C22E-51955BB1014B}\01\13-{892399EA-78DF-E6B5-C22E-51955BB1014B}-v1-{3078C444-BED3-4433-A881-23AC306A7F36}-v13-Downloaded.frx:{59828bbb-3f72-4c1b-a420-b51ad66eb5d3}.XPRESS

---- EOF - GMER 1.0.13 ----
TCool a.k.a. TC
12-09-2007, 21:42
è la prima volta ke uso questi tool...quindi non mi cazziare se non ho usato le
"righe rosse"! xD
Bugs Bunny
12-09-2007, 21:46
O4 - HKCU\..\Run: [Network Security] C:\WINDOWS\System32\NSecurity.exe

Installa immediatamente service pack 2 e tutti gli aggiornamenti di sicurezza del sistema operativo e aggiorna internet explorer


O4 - HKCU\..\Run: [Network Security] C:\WINDOWS\System32\NSecurity.exe
TCool a.k.a. TC
12-09-2007, 21:50
proprio quello ke volevo evitare....cmq aggiornerò il tutto....cmq una volta aggiornato tutto l'ambaradam il virus viene eliminato automatikamente???
SuGaR0
12-09-2007, 21:55
proprio quello ke volevo evitare....cmq aggiornerò il tutto....cmq una volta aggiornato tutto l'ambaradam il virus viene eliminato automatikamente???


Semplicemente il sp2 elimina il bug "principe" che affliggeva xp e non avrai più problemi
TCool a.k.a. TC
12-09-2007, 21:57
ooooook...capito...quindi un bell'aggiornamento e sono apposto....grazie mille a tutti!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! mi avete salvato!!! xD xD