SysProt AntiRootkit v1.0.1.0
by swatkat

******************************************************************************************
******************************************************************************************

Process:
Name: [System Idle Process]
PID: 0
Hidden: No
Window Visible: No

Name: System
PID: 4
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\smss.exe
PID: 628
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\csrss.exe
PID: 748
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\winlogon.exe
PID: 772
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\services.exe
PID: 816
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\lsass.exe
PID: 828
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1000
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1060
Hidden: No
Window Visible: No

Name: C:\Program Files\COMODO\Firewall\cmdagent.exe
PID: 1120
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1152
Hidden: No
Window Visible: No

Name: C:\Program Files\Windows Defender\MsMpEng.exe
PID: 1180
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1388
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1452
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\spoolsv.exe
PID: 1524
Hidden: No
Window Visible: No

Name: C:\Program Files\Avira\AntiVir Desktop\sched.exe
PID: 1572
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1828
Hidden: No
Window Visible: No

Name: C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PID: 312
Hidden: No
Window Visible: No

Name: C:\Program Files\Bonjour\mDNSResponder.exe
PID: 332
Hidden: No
Window Visible: No

Name: C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe
PID: 416
Hidden: No
Window Visible: No

Name: C:\Program Files\Java\jre6\bin\jqs.exe
PID: 584
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\lkcitdl.exe
PID: 668
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\lkads.exe
PID: 948
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\lktsrv.exe
PID: 1008
Hidden: No
Window Visible: No

Name: C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
PID: 1176
Hidden: No
Window Visible: No

Name: C:\Program Files\Microsoft SQL Server\MSSQL.2\MSSQL\Binn\sqlservr.exe
PID: 1564
Hidden: No
Window Visible: No

Name: C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
PID: 1668
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\nvsvc32.exe
PID: 1688
Hidden: No
Window Visible: No

Name: C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
PID: 1876
Hidden: No
Window Visible: No

Name: C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
PID: 1920
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\svchost.exe
PID: 1980
Hidden: No
Window Visible: No

Name: C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe
PID: 2756
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\alg.exe
PID: 3040
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\WgaTray.exe
PID: 3384
Hidden: No
Window Visible: No

Name: C:\WINDOWS\explorer.exe
PID: 3464
Hidden: No
Window Visible: No

Name: C:\WINDOWS\SOUNDMAN.EXE
PID: 3640
Hidden: No
Window Visible: No

Name: C:\Program Files\Windows Defender\MSASCui.exe
PID: 3652
Hidden: No
Window Visible: No

Name: C:\Program Files\COMODO\Firewall\cfp.exe
PID: 3848
Hidden: No
Window Visible: No

Name: C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PID: 3936
Hidden: No
Window Visible: No

Name: C:\Program Files\Java\jre6\bin\jusched.exe
PID: 4032
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\ctfmon.exe
PID: 244
Hidden: No
Window Visible: No

Name: C:\Program Files\Logitech\Profiler\LWEMon.exe
PID: 536
Hidden: No
Window Visible: No

Name: C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
PID: 1252
Hidden: No
Window Visible: No

Name: C:\Program Files\Microsoft ActiveSync\wcescomm.exe
PID: 1328
Hidden: No
Window Visible: No

Name: C:\Program Files\Messenger\msmsgs.exe
PID: 2064
Hidden: No
Window Visible: No

Name: C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
PID: 2536
Hidden: No
Window Visible: No

Name: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
PID: 744
Hidden: No
Window Visible: No

Name: C:\Program Files\ZyXEL\ZyXEL G-202 Wireless Adapter Utility\ZyXEL G-202.exe
PID: 696
Hidden: No
Window Visible: No

Name: C:\Program Files\FSL\FSL_Launcher\FSL_Launcher.exe
PID: 596
Hidden: No
Window Visible: No

Name: C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
PID: 3480
Hidden: No
Window Visible: No

Name: C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
PID: 2640
Hidden: No
Window Visible: No

Name: C:\WINDOWS\system32\wuauclt.exe
PID: 3348
Hidden: No
Window Visible: No

Name: C:\Program Files\Mozilla Firefox\firefox.exe
PID: 3304
Hidden: No
Window Visible: No

Name: C:\Documents and Settings\JOHN\Bureaublad\temp\SysProt\SysProt\SysProt.exe
PID: 3560
Hidden: No
Window Visible: Yes

******************************************************************************************
******************************************************************************************
Kernel Modules:
Module Name: \??\C:\Documents and Settings\JOHN\Bureaublad\temp\SysProt\SysProt\SysProtDrv.sys
Service Name: SysProtDrv.sys
Module Base: B1F0F000
Module End: B1F1A000
Hidden: No

Module Name: \WINDOWS\system32\ntkrnlpa.exe
Service Name: ---
Module Base: 804D7000
Module End: 806D0780
Hidden: No

Module Name: \WINDOWS\system32\hal.dll
Service Name: ---
Module Base: 806D1000
Module End: 806F1300
Hidden: No

Module Name: \WINDOWS\system32\KDCOM.DLL
Service Name: ---
Module Base: BADA8000
Module End: BADAA000
Hidden: No

Module Name: \WINDOWS\system32\BOOTVID.dll
Service Name: ---
Module Base: BACB8000
Module End: BACBB000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\sptd.sys
Service Name: sptd
Module Base: BA6D0000
Module End: BA7A7000
Hidden: No

Module Name: \WINDOWS\System32\Drivers\WMILIB.SYS
Service Name: ---
Module Base: BADAA000
Module End: BADAC000
Hidden: No

Module Name: \WINDOWS\System32\Drivers\SCSIPORT.SYS
Service Name: ScsiPort
Module Base: BA6B8000
Module End: BA6D0000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\ACPI.sys
Service Name: ACPI
Module Base: BA689000
Module End: BA6B8000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\pci.sys
Service Name: PCI
Module Base: BA678000
Module End: BA689000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\ohci1394.sys
Service Name: ohci1394
Module Base: BA8A8000
Module End: BA8B8000
Hidden: No

Module Name: \WINDOWS\System32\DRIVERS\1394BUS.SYS
Service Name: ---
Module Base: BA8B8000
Module End: BA8C6000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\isapnp.sys
Service Name: isapnp
Module Base: BA8C8000
Module End: BA8D2000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\pciide.sys
Service Name: PCIIde
Module Base: BAE70000
Module End: BAE71000
Hidden: No

Module Name: \WINDOWS\System32\DRIVERS\PCIIDEX.SYS
Service Name: ---
Module Base: BAB28000
Module End: BAB2F000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\MountMgr.sys
Service Name: MountMgr
Module Base: BA8D8000
Module End: BA8E3000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\ftdisk.sys
Service Name: Disk
Module Base: BA659000
Module End: BA678000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\dmload.sys
Service Name: dmload
Module Base: BADAC000
Module End: BADAE000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\dmio.sys
Service Name: dmio
Module Base: BA633000
Module End: BA659000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\PartMgr.sys
Service Name: PartMgr
Module Base: BAB30000
Module End: BAB35000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\VolSnap.sys
Service Name: VolSnap
Module Base: BA8E8000
Module End: BA8F6000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\atapi.sys
Service Name: atapi
Module Base: BA61B000
Module End: BA633000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\disk.sys
Service Name: ---
Module Base: BA8F8000
Module End: BA901000
Hidden: No

Module Name: \WINDOWS\System32\DRIVERS\CLASSPNP.SYS
Service Name: ---
Module Base: BA908000
Module End: BA915000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\fltmgr.sys
Service Name: FltMgr
Module Base: BA5FB000
Module End: BA61B000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\sr.sys
Service Name: sr
Module Base: BA5E9000
Module End: BA5FB000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\PxHelp20.sys
Service Name: PxHelp20
Module Base: BA918000
Module End: BA921000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\TPkd.sys
Service Name: TPkd
Module Base: BA5D7000
Module End: BA5E9000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\KSecDD.sys
Service Name: KSecDD
Module Base: BA5C0000
Module End: BA5D7000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\Ntfs.sys
Service Name: Ntfs
Module Base: BA533000
Module End: BA5C0000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\inspect.sys
Service Name: Inspect
Module Base: BA520000
Module End: BA533000
Hidden: No

Module Name: \WINDOWS\System32\DRIVERS\NDIS.SYS
Service Name: NDIS
Module Base: BA4F3000
Module End: BA520000
Hidden: No

Module Name: \WINDOWS\System32\DRIVERS\TDI.SYS
Service Name: ---
Module Base: BAB38000
Module End: BAB3D000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\sfvfs02.sys
Service Name: sfvfs02
Module Base: BA4E0000
Module End: BA4F3000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\sfhlp02.sys
Service Name: sfhlp02
Module Base: BAB40000
Module End: BAB48000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\sfdrv01.sys
Service Name: sfdrv01
Module Base: BA4CE000
Module End: BA4E0000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\Mup.sys
Service Name: Mup
Module Base: BA4B4000
Module End: BA4CE000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\nv4_mini.sys
Service Name: nv
Module Base: B9D9B000
Module End: BA16B000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\VIDEOPRT.SYS
Service Name: ---
Module Base: B9D87000
Module End: B9D9B000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\usbohci.sys
Service Name: usbohci
Module Base: BAC20000
Module End: BAC25000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\USBPORT.SYS
Service Name: ---
Module Base: B9D63000
Module End: B9D87000
Hidden: No

Module Name: C:\WINDOWS\system32\DRIVERS\usbehci.sys
Service Name: usbehci
Module Base: BAC28000
Module End: BAC30000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\ElbyCDFL.sys
Service Name: ElbyCDFL
Module Base: BAC30000
Module End: BAC37000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\ElbyDelay.sys
Service Name: ElbyDelay
Module Base: BADCE000
Module End: BADD0000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\cdrom.sys
Service Name: Cdrom
Module Base: BAB08000
Module End: BAB18000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\redbook.sys
Service Name: redbook
Module Base: BAB18000
Module End: BAB27000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ks.sys
Service Name: ---
Module Base: B9D40000
Module End: B9D63000
Hidden: No

Module Name: C:\WINDOWS\system32\DRIVERS\imapi.sys
Service Name: Imapi
Module Base: BA948000
Module End: BA953000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\serial.sys
Service Name: Serial
Module Base: BA958000
Module End: BA968000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\serenum.sys
Service Name: serenum
Module Base: BA46C000
Module End: BA470000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\parport.sys
Service Name: Parport
Module Base: B9D2C000
Module End: B9D40000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\i8042prt.sys
Service Name: i8042prt
Module Base: BA968000
Module End: BA976000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\kbdclass.sys
Service Name: Kbdclass
Module Base: BAC38000
Module End: BAC3F000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\mouclass.sys
Service Name: Mouclass
Module Base: BAC40000
Module End: BAC46000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\RTL8139.SYS
Service Name: rtl8139
Module Base: BAC48000
Module End: BAC4E000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\nic1394.sys
Service Name: NIC1394
Module Base: BA978000
Module End: BA988000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\ALCXWDM.SYS
Service Name: ALCXWDM
Module Base: B9AF5000
Module End: B9D2C000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\portcls.sys
Service Name: ---
Module Base: B9AD1000
Module End: B9AF5000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\drmk.sys
Service Name: ---
Module Base: BA988000
Module End: BA997000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\processr.sys
Service Name: Processor
Module Base: BA998000
Module End: BA9A2000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\audstub.sys
Service Name: audstub
Module Base: BAF76000
Module End: BAF77000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\rasl2tp.sys
Service Name: Rasl2tp
Module Base: BA9A8000
Module End: BA9B5000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ndistapi.sys
Service Name: NdisTapi
Module Base: BA468000
Module End: BA46B000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ndiswan.sys
Service Name: NdisWan
Module Base: B9ABA000
Module End: B9AD1000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\raspppoe.sys
Service Name: RasPppoe
Module Base: BA9B8000
Module End: BA9C3000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\raspptp.sys
Service Name: PptpMiniport
Module Base: BA9C8000
Module End: BA9D4000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\psched.sys
Service Name: PSched
Module Base: B9A09000
Module End: B9A1A000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\msgpc.sys
Service Name: Gpc
Module Base: BA9D8000
Module End: BA9E1000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ptilink.sys
Service Name: Ptilink
Module Base: BAC50000
Module End: BAC55000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\raspti.sys
Service Name: Raspti
Module Base: BAC58000
Module End: BAC5D000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\rdpdr.sys
Service Name: rdpdr
Module Base: B8A62000
Module End: B8A92000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\termdd.sys
Service Name: TermDD
Module Base: BA9F8000
Module End: BAA02000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\swenum.sys
Service Name: swenum
Module Base: BADD6000
Module End: BADD8000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\update.sys
Service Name: Update
Module Base: B8A04000
Module End: B8A62000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\WmBEnum.sys
Service Name: WmBEnum
Module Base: BA448000
Module End: BA44B000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\WmXlCore.sys
Service Name: WmXlCore
Module Base: BAA08000
Module End: BAA13000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\mssmbios.sys
Service Name: mssmbios
Module Base: BA444000
Module End: BA448000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\NDProxy.SYS
Service Name: NDProxy
Module Base: BAA18000
Module End: BAA22000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\usbhub.sys
Service Name: usbhub
Module Base: BAA28000
Module End: BAA37000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\USBD.SYS
Service Name: ---
Module Base: BADD8000
Module End: BADDA000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\cmdguard.sys
Service Name: cmdGuard
Module Base: B6445000
Module End: B6464000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS
Service Name: Fs_Rec
Module Base: BADDA000
Module End: BADDC000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Null.SYS
Service Name: Null
Module Base: BAF0E000
Module End: BAF0F000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Beep.SYS
Service Name: Beep
Module Base: BADDC000
Module End: BADDE000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\HIDPARSE.SYS
Service Name: ---
Module Base: BAC80000
Module End: BAC87000
Hidden: No

Module Name: C:\WINDOWS\System32\drivers\vga.sys
Service Name: VgaSave
Module Base: BAC88000
Module End: BAC8E000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\mnmdd.SYS
Service Name: mnmdd
Module Base: BADDE000
Module End: BADE0000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
Service Name: RDPCDD
Module Base: BADE0000
Module End: BADE2000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Msfs.SYS
Service Name: Msfs
Module Base: BAC90000
Module End: BAC95000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Npfs.SYS
Service Name: Npfs
Module Base: BAC98000
Module End: BACA0000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\rasacd.sys
Service Name: RasAcd
Module Base: BAD94000
Module End: BAD97000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ipsec.sys
Service Name: IPSec
Module Base: B6412000
Module End: B6425000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\tcpip.sys
Service Name: Tcpip
Module Base: B63B9000
Module End: B6412000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\cmdhlp.sys
Service Name: cmdHlp
Module Base: BACA0000
Module End: BACA5000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ipnat.sys
Service Name: IpNat
Module Base: B6393000
Module End: B63B9000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\wanarp.sys
Service Name: Wanarp
Module Base: BAA38000
Module End: BAA41000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\netbt.sys
Service Name: NetBT
Module Base: B636B000
Module End: B6393000
Hidden: No

Module Name: C:\WINDOWS\System32\drivers\afd.sys
Service Name: AFD
Module Base: B6349000
Module End: B636B000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\netbios.sys
Service Name: NetBIOS
Module Base: BAA48000
Module End: BAA51000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\SCDEmu.SYS
Service Name: SCDEmu
Module Base: BACA8000
Module End: BACB0000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\rdbss.sys
Service Name: Rdbss
Module Base: B62F6000
Module End: B6321000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
Service Name: MRxSmb
Module Base: B6286000
Module End: B62F6000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Fips.SYS
Service Name: Fips
Module Base: BAA58000
Module End: BAA63000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\arp1394.sys
Service Name: Arp1394
Module Base: BAA68000
Module End: BAA77000
Hidden: No

Module Name: C:\WINDOWS\system32\DRIVERS\avipbb.sys
Service Name: avipbb
Module Base: B6242000
Module End: B625E000
Hidden: No

Module Name: \??\C:\Program Files\Avira\AntiVir Desktop\avgio.sys
Service Name: avgio
Module Base: BADE6000
Module End: BADE8000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS
Service Name: usbstor
Module Base: BAB78000
Module End: BAB7F000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Fastfat.SYS
Service Name: Fastfat
Module Base: B5C62000
Module End: B5C86000
Hidden: No

Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys
Service Name: ---
Module Base: B5C4A000
Module End: B5C62000
Hidden: Yes

Module Name: \SystemRoot\System32\Drivers\dump_WMILIB.SYS
Service Name: ---
Module Base: BADB8000
Module End: BADBA000
Hidden: Yes

Module Name: C:\WINDOWS\System32\drivers\Dxapi.sys
Service Name: ---
Module Base: B6484000
Module End: B6487000
Hidden: No

Module Name: C:\WINDOWS\System32\watchdog.sys
Service Name: ---
Module Base: BABA0000
Module End: BABA5000
Hidden: No

Module Name: C:\WINDOWS\System32\drivers\dxgthk.sys
Service Name: ---
Module Base: BAEA6000
Module End: BAEA7000
Hidden: No

Module Name: C:\WINDOWS\system32\DRIVERS\avgntflt.sys
Service Name: avgntflt
Module Base: B536D000
Module End: B5381000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\ndisuio.sys
Service Name: Ndisuio
Module Base: B53E5000
Module End: B53E9000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\mrxdav.sys
Service Name: MRxDAV
Module Base: B4870000
Module End: B489D000
Hidden: No

Module Name: \??\C:\WINDOWS\System32\drivers\Haspnt.sys
Service Name: Haspnt
Module Base: B5285000
Module End: B5291000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\cvintdrv.SYS
Service Name: cvintdrv
Module Base: BAFAA000
Module End: BAFAB000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\ParVdm.SYS
Service Name: ParVdm
Module Base: BAE40000
Module End: BAE42000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
Service Name: ElbyCDIO
Module Base: BAE46000
Module End: BAE48000
Hidden: No

Module Name: C:\WINDOWS\System32\DRIVERS\srv.sys
Service Name: Srv
Module Base: B4666000
Module End: B46B8000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\p1c1394.sys
Service Name: P1C1394
Module Base: B5381000
Module End: B5387000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\wdmaud.sys
Service Name: wdmaud
Module Base: B3F99000
Module End: B3FAE000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\sysaudio.sys
Service Name: sysaudio
Module Base: B4526000
Module End: B4535000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\Cdfs.SYS
Service Name: Cdfs
Module Base: B3AED000
Module End: B3AFD000
Hidden: No

Module Name: C:\WINDOWS\System32\Drivers\HTTP.sys
Service Name: HTTP
Module Base: B3602000
Module End: B3643000
Hidden: No

Module Name: \??\C:\WINDOWS\ZDCNDIS5.sys
Service Name: ZDCNDIS5
Module Base: BACB0000
Module End: BACB5000
Hidden: No

Module Name: C:\WINDOWS\system32\drivers\kmixer.sys
Service Name: kmixer
Module Base: B0AA0000
Module End: B0ACB000
Hidden: No

******************************************************************************************
******************************************************************************************
SSDT:
Function Name: ZwAdjustPrivilegesToken
Address: B6449F42
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwConnectPort
Address: B6449464
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwCreateFile
Address: B6449AFE
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwCreateKey
Address: BAF3818E
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwCreatePort
Address: B6449142
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwCreateSection
Address: B644B1CA
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwCreateSymbolicLinkObject
Address: B644B4A2
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwCreateThread
Address: BAF38184
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwDeleteKey
Address: BAF38193
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwDeleteValueKey
Address: BAF3819D
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwDuplicateObject
Address: B6448A6A
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwEnumerateKey
Address: BA6D684C
Driver Base: BA6D0000
Driver End: BA7A7000
Driver Name: sptd.sys

Function Name: ZwEnumerateValueKey
Address: BA6D6BEC
Driver Base: BA6D0000
Driver End: BA7A7000
Driver Name: sptd.sys

Function Name: ZwLoadDriver
Address: B644AE4C
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwLoadKey
Address: BAF381A2
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwMakeTemporaryObject
Address: B64496E8
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwOpenFile
Address: B6449D36
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwOpenKey
Address: BA6D1090
Driver Base: BA6D0000
Driver End: BA7A7000
Driver Name: sptd.sys

Function Name: ZwOpenProcess
Address: BAF38170
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwOpenSection
Address: B6449978
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwOpenThread
Address: BAF38175
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwQueryKey
Address: BA6D6CC4
Driver Base: BA6D0000
Driver End: BA7A7000
Driver Name: sptd.sys

Function Name: ZwQueryValueKey
Address: BA6D6B44
Driver Base: BA6D0000
Driver End: BA7A7000
Driver Name: sptd.sys

Function Name: ZwRenameKey
Address: B644A884
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwReplaceKey
Address: BAF381AC
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwRequestWaitReplyPort
Address: B6449260
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwRestoreKey
Address: BAF381A7
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwSecureConnectPort
Address: B644ABE8
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwSetSystemInformation
Address: B644AFFA
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwSetValueKey
Address: BAF38198
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwShutdownSystem
Address: B6449682
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwSystemDebugControl
Address: B644986C
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

Function Name: ZwTerminateProcess
Address: BAF3817F
Driver Base: 0
Driver End: 0
Driver Name: _unknown_

Function Name: ZwTerminateThread
Address: B6448EDA
Driver Base: B6445000
Driver End: B6464000
Driver Name: \SystemRoot\System32\DRIVERS\cmdguard.sys

******************************************************************************************
******************************************************************************************
No Kernel Hooks found

******************************************************************************************
******************************************************************************************
Hidden files/folders:
Object: C:\Documents and Settings\JOHN\Application Data\SecuROM\UserData\???????????p????????? 
Status: Hidden

Object: C:\Documents and Settings\JOHN\Application Data\SecuROM\UserData\???????????p????????? 
Status: Hidden

Object: C:\System Volume Information\MountPointManagerRemoteDatabase
Status: Access denied

Object: C:\System Volume Information\tracking.log
Status: Access denied

Object: C:\System Volume Information\_restore{A6E89583-DF6A-4FB3-9FA1-67E901016041}
Status: Access denied