This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

wth is going on with my computer..

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Logfile of HijackThis v1.99.1
Scan saved at 10:22:01 PM, on 2/10/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\AIM6\aim6.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
c:\program files\itunes\itunes.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\mspaint.exe
C:\Program Files\Lavasoft\Personal Firewall\lf_viewer.exe
C:\Documents and Settings\cody\My Documents\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Windows Supervisor] C:\Program Files\Windows Supervisor\winspvr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [Personal Firewall] C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe /waitservice
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" –force_start_minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O16 - DPF: {01010200-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Installer) - http://supportcenter.rr.com/sdccommon/download/tgctlins.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://supportcenter.rr.com/sdccommon/download/tgctlsi.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1166572832951
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: bw+0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Lavasoft\PERSON~1\wl_hook.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Personal Firewall Service (LavasoftFirewall) - Agnitum Ltd. - C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - Unknown owner - C:\Virtual\Untrusted\C_\Program Files\PC Tools AntiVirus\PCTAVSvc.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Virtual\Untrusted\C_\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini (file missing)

MY PROBLEM IS A SHITLOAD OF DIFFERENT IP'S ARE USING MY NETBIOS ON MY COMPUTER
Hi! :wavey: and welcome to the Tom Coyote forums.
My name is John Brouwer - if it helps, you can call me John for short. I'll be glad to help you with your computer problems.

HijackThis logs can take some time to research, so please be patient with me. I know that you need
your computer working as quickly as possible, and I will work hard to help see that happens.
I am currently looking over your log. As I am a trainee, everything that I post to you must be checked by an Admin or Moderator. Thus, there may be a tiny bit of a delay between posts, but it shouldn't be too long. I will post back shortly with a potential fix.

Please be patient and I'd be grateful if you would note the following:
  • I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
  • The fixes are specific to your problem and should only be used for this issue on this machine.
  • Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
  • It's often worth reading through these instructions and printing them for ease of reference.
  • If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
  • Please reply to this thread. Do not start a new topic.
  • Finally, please make a uninstall list using HijackThis
    To access the Uninstall Manager you would do the following:

    1. Start HijackThis
    2. Click on the Config button
    3. Click on the Misc Tools button
    4. Click on the Open Uninstall Manager button.

    You will now be presented with a screen similar to the one below:

    [external image: Posted Image]

    5. Click on the Save list… button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in a reply.
Greets, John.
Hi,

Update Your Windows XP
We can definitely help you, but first you need to help us. You are quite behind on your Windows Updates and Patches!!

The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here to get WinXP SP1a: http://www.microsoft.com/downloads/details…&DisplayLang=en

Apply the update, reboot, then go to Windows Update and install all the Critical Updates (Note: Do NOT install WinXP SP2 because we have to clean your computer first!)
Click here for Windows Update: http://www.windowsupdate.com/

After installing all the Patches and updates, reboot, then post a fresh Hijack This log together with the Uninstall log (if you haven't posted it yet) that I asked you to make in my Welcome Speech.

Greets, John.
Adobe Flash Player 9 ActiveX Adobe Reader 8 Adobe® Photoshop® Album Starter Edition 3.0 AIM 6.0 AirSnare Apple Software Update avast! Antivirus Azureus Battlefield 2142 Creative Audio Console Creative MediaSource Data Lifeguard Tools DivX Codec DivX Content Uploader DivX Converter DivX Player DivX Web Player GameSpy Arcade GSC HijackThis 1.99.1 iTunes J2SE Runtime Environment 5.0 Update 9 KhalSetup Lavasoft Personal Firewall 1.0 Logitech Desktop Messenger Logitech SetPoint MechWarrior 4 Mercenaries Microsoft .NET Framework 1.1 Microsoft LifeCam Microsoft Visual C++ 2005 Redistributable Microsoft XML Parser and SDK mIRC Mozilla Firefox (2.0.0.1) MSN Toolbar MSXML 4.0 SP2 (KB925672) MSXML 4.0 SP2 Parser and SDK NVIDIA Drivers PC Wizard 2006.1.71.3 Prevx1 QuickTime Sound Blaster Audigy 2 ZS SpeechRedist Steam™ Ventrilo Client VIA Platform Device Manager VIA Rhine-Family Fast Ethernet Adapter Viewpoint Media Player Windows Live Messenger Windows Live Sign-in Assistant Windows Media Format Runtime Windows Media Player 10 Windows XP Hotfix - KB823559 Windows XP Hotfix - KB828741 Windows XP Hotfix - KB834707 Windows XP Hotfix - KB835732 Windows XP Hotfix (SP1) [See Q329048 for more information] Windows XP Hotfix (SP1) [See Q329390 for more information] Windows XP Hotfix (SP1) [See Q329441 for more information] Windows XP Hotfix (SP1) [See Q329834 for more information] Windows XP Hotfix (SP1) Q329170 Windows XP Hotfix (SP1) Q810577 Windows XP Hotfix (SP1) Q810833 Windows XP Hotfix (SP1) Q815021 Windows XP Hotfix (SP1) Q817606 Windows XP Hotfix (SP2) [See Q329115 for more information] WinRAR archiver Yahoo! Install Manager Yahoo! Messenger
also i'm not sure why but i can also post a log of my firewall ive been blocking so many things since about 9:44 pm lastnight central us time

Hi,

Update Your Windows XP
We can definitely help you, but first you need to help us. You are quite behind on your Windows Updates and Patches!!

The first step in this process is to apply Service Pack 1a for Windows XP. Without this update, you're wide open to re-infection, and we're both just wasting our time.
Click here to get WinXP SP1a: http://www.microsoft.com/downloads/details…&DisplayLang=en

Apply the update, reboot, then go to Windows Update and install all the Critical Updates (Note: Do NOT install WinXP SP2 because we have to clean your computer first!)
Click here for Windows Update: http://www.windowsupdate.com/

After installing all the Patches and updates, reboot, then post a fresh Hijack This log.

Greets, John.

Please do this!
Logfile of HijackThis v1.99.1
Scan saved at 2:13:28 PM, on 2/11/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
C:\WINDOWS\System32\RUNDLL32.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\CTHELPER.EXE
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE
c:\program files\itunes\itunes.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Common Files\Microsoft Shared\Speech\sapisvr.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe
C:\WINDOWS\system32\sessmgr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\WINDOWS\PCHEALTH\HELPCTR\Binaries\helpctr.exe
C:\WINDOWS\system32\RDSHOST.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpCtr.exe
C:\Documents and Settings\cody\My Documents\HJT\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaul…rch/search.html
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users.WINDOWS\Application Data\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [Windows Supervisor] C:\Program Files\Windows Supervisor\winspvr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Common Files\Logitech\khalshared\KHALMNPR.EXE"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [Personal Firewall] C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe /waitservice
O4 - HKLM\..\Run: [PrevxOne] "C:\Program Files\Prevx1\PXConsole.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" –force_start_minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O16 - DPF: {01010200-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Installer) - http://supportcenter.rr.com/sdccommon/download/tgctlins.cab
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) - http://supportcenter.rr.com/sdccommon/download/tgctlsi.cab
O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - http://supportcenter.rr.com/sdccommon/download/tgctlcm.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecal…ivex/hcImpl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedC…bin/AvSniff.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat…b?1166572832951
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O18 - Protocol: bw+0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {8293E868-674E-4CC5-9D06-7D90FC51A961} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Lavasoft\PERSON~1\wl_hook.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Lavasoft Personal Firewall Service (LavasoftFirewall) - Agnitum Ltd. - C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: PC Tools AntiVirus Engine (PCTAVSvc) - Unknown owner - C:\Virtual\Untrusted\C_\Program Files\PC Tools AntiVirus\PCTAVSvc.exe (file missing)
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Virtual\Untrusted\C_\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini (file missing)

i dont know what the difference will make since i did post that other log lastnight i dont think anything changed
Hi,

Your HijackThis log looks clean but the symtoms you have a really strange so lets check out if you've a rootkit.

Step 1: Download and Run Gmer
Download Gmer to your Desktop and unzip it to your Desktop.
http://www.gmer.net/gmer.zip

Disconnect from internet and close running programs.
There is a small chance this application may crash your computer so save any work you have open.
Double click gmer.exe.
Let the gmer.sys driver load if asked.
If it gives you a warning at program start about rootkit activity and asks if you want to run scan…say Ok.
If no warning….
Click the rootkit tab
To the right of the program you will see a bunch of boxes that have been checked… leave everything checked. Then click the Scan button. Wait for the scan to finish.
Once done click the Copy button.
Open Notepad and hit ctrl+v to paste the log. Save the log to your desktop please.

Click the >>> tab. This will open up all available tabs for you.
Click the Autostart tab then the scan button. Once its done click the Copy button and paste it into a new reply.

Greets, John.
GMER 1.0.12.12027 - http://www.gmer.net
Rootkit scan 2007-02-13 18:42:48
Windows 5.1.2600


—- System - GMER 1.0.12 —-

SSDT pxfsf.sys

ZwAlertResumeThread
SSDT pxfsf.sys

ZwAllocateUserPhysicalPages
SSDT pxfsf.sys

ZwAllocateVirtualMemory
SSDT pxfsf.sys

ZwClose
SSDT pxfsf.sys

ZwCompactKeys
SSDT pxfsf.sys

ZwCompressKey
SSDT pxfsf.sys

ZwCreateDirectoryObject
SSDT pxfsf.sys

ZwCreateEvent
SSDT pxfsf.sys

ZwCreateEventPair
SSDT pxfsf.sys

ZwCreateFile
SSDT pxfsf.sys

ZwCreateIoCompletion
SSDT pxfsf.sys

ZwCreateJobObject
SSDT pxfsf.sys

ZwCreateKey
SSDT pxfsf.sys

ZwCreateMailslotFile
SSDT pxfsf.sys

ZwCreateMutant
SSDT pxfsf.sys

ZwCreateNamedPipeFile
SSDT a347bus.sys

ZwCreatePagingFile
SSDT pxfsf.sys

ZwCreatePort
SSDT pxfsf.sys

ZwCreateProcess
SSDT pxfsf.sys

ZwCreateProcessEx
SSDT pxfsf.sys

ZwCreateSection
SSDT pxfsf.sys

ZwCreateSemaphore
SSDT pxfsf.sys

ZwCreateSymbolicLinkObject
SSDT pxfsf.sys

ZwCreateThread
SSDT pxfsf.sys

ZwCreateTimer
SSDT pxfsf.sys

ZwCreateToken
SSDT pxfsf.sys

ZwDeleteFile
SSDT pxfsf.sys

ZwDeleteKey
SSDT pxfsf.sys

ZwDeleteValueKey
SSDT pxfsf.sys

ZwDeviceIoControlFile
SSDT pxfsf.sys

ZwDuplicateObject
SSDT pxfsf.sys

ZwEnumerateKey
SSDT pxfsf.sys

ZwEnumerateValueKey
SSDT pxfsf.sys

ZwFreeUserPhysicalPages
SSDT pxfsf.sys

ZwFreeVirtualMemory
SSDT pxfsf.sys

ZwImpersonateAnonymousToken
SSDT pxfsf.sys

ZwImpersonateThread
SSDT pxfsf.sys

ZwLoadDriver
SSDT pxfsf.sys

ZwLoadKey
SSDT pxfsf.sys

ZwLoadKey2
SSDT pxfsf.sys

ZwLockRegistryKey
SSDT pxfsf.sys

ZwLockVirtualMemory
SSDT pxfsf.sys

ZwMapViewOfSection
SSDT pxfsf.sys

ZwOpenFile
SSDT pxfsf.sys

ZwOpenKey
SSDT pxfsf.sys

ZwOpenProcess
SSDT pxfsf.sys

ZwOpenProcessToken
SSDT pxfsf.sys

ZwOpenSection
SSDT pxfsf.sys

ZwOpenThread
SSDT pxfsf.sys

ZwOpenThreadToken
SSDT pxfsf.sys

ZwProtectVirtualMemory
SSDT pxfsf.sys

ZwQueryInformationProcess
SSDT pxfsf.sys

ZwQueryInformationThread
SSDT pxfsf.sys

ZwQueryKey
SSDT pxfsf.sys

ZwQueryMultipleValueKey
SSDT pxfsf.sys

ZwQueryOpenSubKeys
SSDT pxfsf.sys

ZwQueryValueKey
SSDT pxfsf.sys

ZwQueueApcThread
SSDT pxfsf.sys

ZwReadFile
SSDT pxfsf.sys

ZwReadVirtualMemory
SSDT pxfsf.sys

ZwRenameKey
SSDT pxfsf.sys

ZwReplaceKey
SSDT pxfsf.sys

ZwRestoreKey
SSDT pxfsf.sys

ZwResumeProcess
SSDT pxfsf.sys

ZwResumeThread
SSDT pxfsf.sys

ZwSaveKey
SSDT pxfsf.sys

ZwSaveKeyEx
SSDT pxfsf.sys

ZwSaveMergedKeys
SSDT pxfsf.sys

ZwSetContextThread
SSDT pxfsf.sys

ZwSetInformationKey
SSDT pxfsf.sys

ZwSetInformationProcess
SSDT pxfsf.sys

ZwSetInformationThread
SSDT pxfsf.sys

ZwSetSystemInformation
SSDT a347bus.sys

ZwSetSystemPowerState
SSDT pxfsf.sys

ZwSetValueKey
SSDT pxfsf.sys

ZwSuspendProcess
SSDT pxfsf.sys

ZwSuspendThread
SSDT pxfsf.sys

ZwSystemDebugControl
SSDT pxfsf.sys

ZwTerminateJobObject
SSDT \??\C:\Program Files\Lavasoft\Personal Firewall\kernel\FILTNT.SYS

ZwTerminateProcess
SSDT pxfsf.sys

ZwTerminateThread
SSDT pxfsf.sys

ZwUnloadDriver
SSDT pxfsf.sys

ZwUnloadKey
SSDT pxfsf.sys

ZwUnloadKeyEx
SSDT pxfsf.sys

ZwUnlockVirtualMemory
SSDT pxfsf.sys

ZwUnmapViewOfSection
SSDT pxfsf.sys

ZwWriteFile
SSDT \??\C:\Program Files\Lavasoft\Personal Firewall\kernel\FILTNT.SYS

ZwWriteVirtualMemory

—- Kernel code sections - GMER 1.0.12 —-

.text ntoskrnl.exe!KeInitializeInterrupt + B79

804DBF8E 1 Byte [ 06 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 13C

80503654 4 Bytes [ 3D, 28, 45, F7 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 148

80503660 4 Bytes [ 47, 28, 45, F7 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 150

80503668 4 Bytes [ 51, 28, 45, F7 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 170

80503688 4 Bytes [ 5B, 28, 45, F7 ]
.text ntoskrnl.exe!KeI386Call16BitCStyleFunction + 178

80503690 4 Bytes [ 65, 28, 45, F7 ]
.text …


.text USBPORT.SYS!DllUnload

F6BFCDBC 5 Bytes JMP 86D191B8
.text ntdll.dll!NtClose

77F5B458 5 Bytes JMP 7203407A
.text ntdll.dll!NtCreateProcess

77F5B5B8 5 Bytes JMP 72034205
.text ntdll.dll!NtCreateProcessEx

77F5B5C8 5 Bytes JMP 720340E9
.text ntdll.dll!NtCreateSection

77F5B5E8 5 Bytes JMP 72034098

—- User code sections - GMER 1.0.12 —-

.text C:\Program Files\Lavasoft\Personal Firewall\lpfw.exe[1900]

SHELL32.dll!ShellExecuteExW 77418369 5 Bytes JMP 10029D0B C:\Program

Files\Lavasoft\Personal Firewall\engine.dll
.text C:\Program Files\MSN Messenger\msnmsgr.exe[2948]

kernel32.dll!SetUnhandledExceptionFilter 77E7C9E7 9 Bytes JMP 004DE392

C:\Program Files\MSN Messenger\msnmsgr.exe

—- Devices - GMER 1.0.12 —-

Device \FileSystem\Ntfs \Ntfs IRP_MJ_CREATE

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLOSE

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_READ

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_WRITE

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_INFORMATION

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_INFORMATION

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_EA

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_EA

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FLUSH_BUFFERS

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_VOLUME_INFORMATION

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_VOLUME_INFORMATION

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DIRECTORY_CONTROL

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_FILE_SYSTEM_CONTROL

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_DEVICE_CONTROL

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SHUTDOWN

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_LOCK_CONTROL

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_CLEANUP

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_SECURITY

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_SECURITY

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_QUERY_QUOTA

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_SET_QUOTA

86FD71D8
Device \FileSystem\Ntfs \Ntfs IRP_MJ_PNP

86FD71D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CREATE

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CLOSE

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_READ

86B5FEA0
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_WRITE

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_QUERY_INFORMATION

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_SET_INFORMATION

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_QUERY_VOLUME_INFORMATION

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_DIRECTORY_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_FILE_SYSTEM_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_DEVICE_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_LOCK_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_CLEANUP

86CC51D8
Device \FileSystem\Udfs \UdfsCdRom IRP_MJ_PNP

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CREATE

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CLOSE

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_READ

86B5FEA0
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_WRITE

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_QUERY_INFORMATION

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_SET_INFORMATION

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_QUERY_VOLUME_INFORMATION

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_DIRECTORY_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_FILE_SYSTEM_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_DEVICE_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_LOCK_CONTROL

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_CLEANUP

86CC51D8
Device \FileSystem\Udfs \UdfsDisk IRP_MJ_PNP

86CC51D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CREATE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_CLOSE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_INTERNAL_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_POWER

86C311D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_SYSTEM_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-0 IRP_MJ_PNP

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CREATE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_CLOSE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_INTERNAL_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_POWER

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_SYSTEM_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-1 IRP_MJ_PNP

86C311D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CREATE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_CLOSE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_READ

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_WRITE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_FLUSH_BUFFERS

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_INTERNAL_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SHUTDOWN

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_POWER

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_SYSTEM_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmIoDaemon IRP_MJ_PNP

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CREATE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_CLOSE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_READ

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_WRITE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_FLUSH_BUFFERS

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_INTERNAL_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SHUTDOWN

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_POWER

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_SYSTEM_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmConfig IRP_MJ_PNP

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CREATE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_CLOSE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_READ

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_WRITE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_FLUSH_BUFFERS

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_INTERNAL_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SHUTDOWN

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_POWER

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_SYSTEM_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmPnP IRP_MJ_PNP

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CREATE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_CLOSE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_READ

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_WRITE

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_FLUSH_BUFFERS

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_INTERNAL_DEVICE_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SHUTDOWN

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_POWER

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_SYSTEM_CONTROL

86FD91D8
Device \Driver\dmio \Device\DmControl\DmInfo IRP_MJ_PNP

86FD91D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CREATE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_CLOSE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_INTERNAL_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_POWER

86C311D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_SYSTEM_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-3 IRP_MJ_PNP

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_CREATE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_CLOSE

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_INTERNAL_DEVICE_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_POWER

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_SYSTEM_CONTROL

86C311D8
Device \Driver\usbuhci \Device\USBPDO-6 IRP_MJ_PNP

86C311D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CREATE

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_READ

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_WRITE

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_FLUSH_BUFFERS

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_DEVICE_CONTROL

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_INTERNAL_DEVICE_CONTROL

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SHUTDOWN

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_CLEANUP

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_POWER

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_SYSTEM_CONTROL

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume1 IRP_MJ_PNP

86F6C1D8
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_NAMED_PIPE

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLOSE

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_READ

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_WRITE

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_INFORMATION

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_INFORMATION

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_EA

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_EA

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FLUSH_BUFFERS

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_VOLUME_INFORMATION

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_VOLUME_INFORMATION

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DIRECTORY_CONTROL

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_FILE_SYSTEM_CONTROL

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CONTROL

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_INTERNAL_DEVICE_CONTROL

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SHUTDOWN

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_LOCK_CONTROL

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CLEANUP

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_CREATE_MAILSLOT

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_SECURITY

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_SECURITY

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_POWER

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SYSTEM_CONTROL

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_DEVICE_CHANGE

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_QUERY_QUOTA

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_SET_QUOTA

86AB1D68
Device \Driver\Cdrom \Device\CdRom0 IRP_MJ_PNP

86AB1D68
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CREATE

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_READ

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_WRITE

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_FLUSH_BUFFERS

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_DEVICE_CONTROL

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_INTERNAL_DEVICE_CONTROL

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SHUTDOWN

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_CLEANUP

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_POWER

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_SYSTEM_CONTROL

86F6C1D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 IRP_MJ_PNP

86F6C1D8
Device \FileSystem\Rdbss \Device\FsWrap IRP_MJ_READ

86D74450
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_NAMED_PIPE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLOSE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_READ

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_WRITE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FLUSH_BUFFERS

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DIRECTORY_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_FILE_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_INTERNAL_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SHUTDOWN

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_LOCK_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CLEANUP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_CREATE_MAILSLOT

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_POWER

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_DEVICE_CHANGE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_QUERY_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_SET_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort0 IRP_MJ_PNP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_NAMED_PIPE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLOSE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_READ

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_WRITE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FLUSH_BUFFERS

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DIRECTORY_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_FILE_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_INTERNAL_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SHUTDOWN

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_LOCK_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CLEANUP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_CREATE_MAILSLOT

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_POWER

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_DEVICE_CHANGE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_QUERY_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_SET_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort1 IRP_MJ_PNP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_CREATE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_CREATE_NAMED_PIPE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_CLOSE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_READ

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_WRITE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_QUERY_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SET_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_QUERY_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SET_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_FLUSH_BUFFERS

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_QUERY_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SET_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_DIRECTORY_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_FILE_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_INTERNAL_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SHUTDOWN

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_LOCK_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_CLEANUP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_CREATE_MAILSLOT

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_QUERY_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SET_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_POWER

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_DEVICE_CHANGE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_QUERY_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_SET_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort2 IRP_MJ_PNP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_CREATE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_CREATE_NAMED_PIPE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_CLOSE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_READ

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_WRITE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_QUERY_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SET_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_QUERY_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SET_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_FLUSH_BUFFERS

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_QUERY_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SET_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_DIRECTORY_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_FILE_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_INTERNAL_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SHUTDOWN

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_LOCK_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_CLEANUP

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_CREATE_MAILSLOT

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_QUERY_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SET_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_POWER

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_DEVICE_CHANGE

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_QUERY_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_SET_QUOTA

86B981C0
Device \Driver\atapi \Device\Ide\IdePort3 IRP_MJ_PNP

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_CREATE

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_CREATE_NAMED_PIPE

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_CLOSE

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_READ

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_WRITE

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_QUERY_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_SET_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_QUERY_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_SET_EA

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_FLUSH_BUFFERS

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_QUERY_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_SET_VOLUME_INFORMATION

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_DIRECTORY_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_FILE_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_INTERNAL_DEVICE_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_SHUTDOWN

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_LOCK_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_CLEANUP

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_CREATE_MAILSLOT

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_QUERY_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_SET_SECURITY

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_POWER

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_SYSTEM_CONTROL

86B981C0
Device \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-12 IRP_MJ_DEVICE_CHANGE
Hi, I'm sorry for the delay! It looks like the log got cut off. Please post the other part. Use multiple post if it doesn't fit in one. Greets, John.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI