GMER 1.0.12.12011 - http://www.gmer.net
Rootkit scan 2007-05-26 22:06:42
Windows 5.1.2600 Service Pack 2


---- System - GMER 1.0.12 ----

SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwClose
SSDT    856DB918                                                  ZwConnectPort
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwCreateFile
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwCreateKey
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwCreateSection
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwDeleteKey
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwDeleteValueKey
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwLoadDriver
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwOpenFile
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwSetValueKey
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwTerminateProcess
SSDT    \??\C:\WINDOWS\system32\drivers\sp_rsdrv2.sys             ZwWriteFile

---- Devices - GMER 1.0.12 ----

Device  \FileSystem\Fastfat \Fat IRP_MJ_CREATE                    F00ADC8A
Device  \FileSystem\Fastfat \Fat IRP_MJ_CLOSE                     F00AA7C8
Device  \FileSystem\Fastfat \Fat IRP_MJ_READ                      F00A660A
Device  \FileSystem\Fastfat \Fat IRP_MJ_WRITE                     F00A6AED
Device  \FileSystem\Fastfat \Fat IRP_MJ_QUERY_INFORMATION         F00B1958
Device  \FileSystem\Fastfat \Fat IRP_MJ_SET_INFORMATION           F00B4821
Device  \FileSystem\Fastfat \Fat IRP_MJ_QUERY_EA                  F00BD38A
Device  \FileSystem\Fastfat \Fat IRP_MJ_SET_EA                    F00BCD49
Device  \FileSystem\Fastfat \Fat IRP_MJ_FLUSH_BUFFERS             F00B6BBE
Device  \FileSystem\Fastfat \Fat IRP_MJ_QUERY_VOLUME_INFORMATION  F00B7331
Device  \FileSystem\Fastfat \Fat IRP_MJ_SET_VOLUME_INFORMATION    F00C54F4
Device  \FileSystem\Fastfat \Fat IRP_MJ_DIRECTORY_CONTROL         F00ADB37
Device  \FileSystem\Fastfat \Fat IRP_MJ_FILE_SYSTEM_CONTROL       F00A9948
Device  \FileSystem\Fastfat \Fat IRP_MJ_DEVICE_CONTROL            F00B346B
Device  \FileSystem\Fastfat \Fat IRP_MJ_SHUTDOWN                  F00C479D
Device  \FileSystem\Fastfat \Fat IRP_MJ_LOCK_CONTROL              F00C3C4A
Device  \FileSystem\Fastfat \Fat IRP_MJ_CLEANUP                   F00AA2FD
Device  \FileSystem\Fastfat \Fat IRP_MJ_PNP                       F00C41DB
Device  \FileSystem\Fastfat \Fat FastIoCheckIfPossible            F00BF1F9

---- EOF - GMER 1.0.12 ----