Results 1 to 8 of 8

Thread: Hijjackthis log help Please

  1. #1
    Junior Member
    Join Date
    Sep 2009
    Location
    Mechanicsville, Maryland
    Posts
    5

    Hijjackthis log help Please

    I was wondering if anyone could help me with this log file- I believe I have a rootkit virus on my pc and its being a biach




    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Google\Update\1.2.183.7\GoogleCrashHandler.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    C:\Program Files\ManyCam 2.4\ManyCam.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Documents and Settings\D\Local Settings\Application Data\Google\Update\1.2.183.7\GoogleCrashHandler.exe
    C:\Program Files\Java\jre6\bin\jucheck.exe
    C:\Documents and Settings\D\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Program Files\AIM6\aim6.exe
    C:\Program Files\AIM6\aolsoftware.exe
    C:\Documents and Settings\D\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Documents and Settings\D\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\WINDOWS\regedit.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Documents and Settings\D\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    O1 - Hosts: .142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - (no file)
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: (no name) - {85301517-0D95-4D43-8382-9C6E57F65EF9} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Viewpoint Toolbar BHO - {A7327C09-B521-4EDB-8509-7D2660C9EC98} - C:\Program Files\Viewpoint\Viewpoint Toolbar\3.9.0\ViewBarBHO.dll
    O2 - BHO: (no name) - {C765A153-85EC-4BD9-8119-6877AF5EC9C1} - (no file)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
    O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Common Files\Viewpoint\Toolbar Runtime\3.9.0\IEViewBar.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\Run: [ManyCam] "C:\Program Files\ManyCam 2.4\ManyCam.exe"
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\D\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
    O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.30.0\gears.dll
    O9 - Extra 'Tools' menuitem: &Gears Settings - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files\Google\Google Gears\Internet Explorer\0.5.30.0\gears.dll
    O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - C:\WINDOWS\system32\shdocvw.dll
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {2019DC25-D1C0-11D6-97B3-0008A124F542} (StreamPlug Class) - http://www.streamplug.com/StreamPlug/beta/SP.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/player/DivXBrowserPlugin.cab
    O16 - DPF: {85D1F3B2-2A21-11D7-97B9-0010DC2A6243} (SecureLogin class) - http://secure2.comned.com/signuptemp...ogin-devel.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://games.myspace.com/Gameshell/G...onGameHost.cab
    O20 - AppInit_DLLs: jclbqa.dll adryju.dll ,c:\progra~1\Manson\liser.dll
    O21 - SSODL: ferrateen - {27321538-5739-4aa1-b84c-7d18e4383f1f} - (no file)
    O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Google Update Service (gupdate1c918e1d6314552) (gupdate1c918e1d6314552) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
    O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\NICCONFIGSVC\NICCONFIGSVC.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe
    O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

    --
    End of file - 9455 bytes

  2. #2
    Elite Member TonyT's Avatar
    Join Date
    Jan 2000
    Location
    Fairfax, VA
    Posts
    10,336
    Use HjT to remove:

    O1 - Hosts: .142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O1 - Hosts: 207.7.142.44 iwalton.com
    O1 - Hosts: 207.7.142.44 www.iwalton.com
    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
    O2 - BHO: (no name) - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - (no file)
    O2 - BHO: (no name) - {85301517-0D95-4D43-8382-9C6E57F65EF9} - (no file)
    O3 - Toolbar: Viewpoint Toolbar - {F8AD5AA5-D966-4667-9DAF-2561D68B2012} - C:\Program Files\Common Files\Viewpoint\Toolbar Runtime\3.9.0\IEViewBar.dll
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O20 - AppInit_DLLs: jclbqa.dll adryju.dll ,c:\progra~1\Manson\liser.dll
    O21 - SSODL: ferrateen - {27321538-5739-4aa1-b84c-7d18e4383f1f} - (no file)
    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    Locate & manually delete these files:
    jclbqa.dll
    adryju.dll
    c:\progra~1\Manson\liser.dll

    Unless you are certain you connect to Internet via a proxy server use HjT to also remove:
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7171
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    If do have a rootkit then some of the HjT removed items will return. If so, download and run Root Repeal and post the logs here in this thread PRIOR to using it to remove files.
    No one has any right to force data on you
    and command you to believe it or else.
    If it is not true for you, it isn't true.

    LRH

  3. #3
    Junior Member
    Join Date
    Sep 2009
    Location
    Mechanicsville, Maryland
    Posts
    5
    Ok Thanks A lot heres the rootrepeal report



    ROOTREPEAL (c) AD, 2007-2009
    ==================================================
    Scan Start Time: 2009/09/02 15:07
    Program Version: Version 1.3.5.0
    Windows Version: Windows XP Media Center Edition SP3
    ==================================================

    Drivers
    -------------------
    Name: 1394BUS.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\1394BUS.SYS
    Address: 0xBA118000 Size: 57344 File Visible: - Signed: -
    Status: -

    Name: ACPI.sys
    Image Path: ACPI.sys
    Address: 0xB9F79000 Size: 187776 File Visible: - Signed: -
    Status: -

    Name: ACPI_HAL
    Image Path: \Driver\ACPI_HAL
    Address: 0x804D7000 Size: 2066048 File Visible: - Signed: -
    Status: -

    Name: AegisP.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\AegisP.sys
    Address: 0xA7DA7000 Size: 15264 File Visible: - Signed: -
    Status: -

    Name: afd.sys
    Image Path: C:\WINDOWS\System32\drivers\afd.sys
    Address: 0xA808C000 Size: 138496 File Visible: - Signed: -
    Status: -

    Name: APPDRV.SYS
    Image Path: C:\WINDOWS\SYSTEM32\DRIVERS\APPDRV.SYS
    Address: 0xB9008000 Size: 16128 File Visible: - Signed: -
    Status: -

    Name: arp1394.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\arp1394.sys
    Address: 0xB96CE000 Size: 60800 File Visible: - Signed: -
    Status: -

    Name: atapi.sys
    Image Path: atapi.sys
    Address: 0xB9F0B000 Size: 96512 File Visible: - Signed: -
    Status: -

    Name: ATMFD.DLL
    Image Path: C:\WINDOWS\System32\ATMFD.DLL
    Address: 0xBFFA0000 Size: 286720 File Visible: - Signed: -
    Status: -

    Name: audstub.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\audstub.sys
    Address: 0xBA755000 Size: 3072 File Visible: - Signed: -
    Status: -

    Name: BATTC.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\BATTC.SYS
    Address: 0xBA4C0000 Size: 16384 File Visible: - Signed: -
    Status: -

    Name: bcm4sbxp.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\bcm4sbxp.sys
    Address: 0xBA258000 Size: 45312 File Visible: - Signed: -
    Status: -

    Name: Beep.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Beep.SYS
    Address: 0xBA604000 Size: 4224 File Visible: - Signed: -
    Status: -

    Name: BOOTVID.dll
    Image Path: C:\WINDOWS\system32\BOOTVID.dll
    Address: 0xBA4B8000 Size: 12288 File Visible: - Signed: -
    Status: -

    Name: cdrom.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\cdrom.sys
    Address: 0xBA298000 Size: 62976 File Visible: - Signed: -
    Status: -

    Name: CLASSPNP.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\CLASSPNP.SYS
    Address: 0xBA0E8000 Size: 53248 File Visible: - Signed: -
    Status: -

    Name: CmBatt.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\CmBatt.sys
    Address: 0xBA58C000 Size: 13952 File Visible: - Signed: -
    Status: -

    Name: compbatt.sys
    Image Path: compbatt.sys
    Address: 0xBA4BC000 Size: 10240 File Visible: - Signed: -
    Status: -

    Name: disk.sys
    Image Path: disk.sys
    Address: 0xBA0D8000 Size: 36352 File Visible: - Signed: -
    Status: -

    Name: dmio.sys
    Image Path: dmio.sys
    Address: 0xB9F23000 Size: 153344 File Visible: - Signed: -
    Status: -

    Name: drmk.sys
    Image Path: C:\WINDOWS\system32\drivers\drmk.sys
    Address: 0xB972E000 Size: 61440 File Visible: - Signed: -
    Status: -

    Name: drvmcdb.sys
    Image Path: drvmcdb.sys
    Address: 0xB9ED6000 Size: 85344 File Visible: - Signed: -
    Status: -

    Name: drvnddm.sys
    Image Path: C:\WINDOWS\system32\drivers\drvnddm.sys
    Address: 0xA7F33000 Size: 38240 File Visible: - Signed: -
    Status: -

    Name: dump_atapi.sys
    Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
    Address: 0xA7E9F000 Size: 98304 File Visible: No Signed: -
    Status: -

    Name: dump_WMILIB.SYS
    Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
    Address: 0xBA626000 Size: 8192 File Visible: No Signed: -
    Status: -

    Name: Dxapi.sys
    Image Path: C:\WINDOWS\System32\drivers\Dxapi.sys
    Address: 0xA8049000 Size: 12288 File Visible: - Signed: -
    Status: -

    Name: dxg.sys
    Image Path: C:\WINDOWS\System32\drivers\dxg.sys
    Address: 0xBF000000 Size: 73728 File Visible: - Signed: -
    Status: -

    Name: dxgthk.sys
    Image Path: C:\WINDOWS\System32\drivers\dxgthk.sys
    Address: 0xBA6A7000 Size: 4096 File Visible: - Signed: -
    Status: -

    Name: Fastfat.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Fastfat.SYS
    Address: 0xA7EB7000 Size: 143744 File Visible: - Signed: -
    Status: -

    Name: Fips.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Fips.SYS
    Address: 0xB96EE000 Size: 44544 File Visible: - Signed: -
    Status: -

    Name: fltmgr.sys
    Image Path: fltmgr.sys
    Address: 0xB9EEB000 Size: 129792 File Visible: - Signed: -
    Status: -

    Name: Fs_Rec.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Fs_Rec.SYS
    Address: 0xBA602000 Size: 7936 File Visible: - Signed: -
    Status: -

    Name: ftdisk.sys
    Image Path: ftdisk.sys
    Address: 0xB9F49000 Size: 125056 File Visible: - Signed: -
    Status: -

    Name: GEARAspiWDM.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
    Address: 0xBA2B8000 Size: 40960 File Visible: - Signed: -
    Status: -

    Name: hal.dll
    Image Path: C:\WINDOWS\system32\hal.dll
    Address: 0x806D0000 Size: 131840 File Visible: - Signed: -
    Status: -

    Name: HDAudBus.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
    Address: 0xB9571000 Size: 163840 File Visible: - Signed: -
    Status: -

    Name: HIDCLASS.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\HIDCLASS.SYS
    Address: 0xB96BE000 Size: 36864 File Visible: - Signed: -
    Status: -

    Name: HIDPARSE.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\HIDPARSE.SYS
    Address: 0xBA348000 Size: 28672 File Visible: - Signed: -
    Status: -

    Name: hidusb.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\hidusb.sys
    Address: 0xB9014000 Size: 10368 File Visible: - Signed: -
    Status: -

    Name: HTTP.sys
    Image Path: C:\WINDOWS\System32\Drivers\HTTP.sys
    Address: 0xA771E000 Size: 264832 File Visible: - Signed: -
    Status: -

    Name: i2omgmt.SYS
    Image Path: C:\WINDOWS\System32\Drivers\i2omgmt.SYS
    Address: 0xBA590000 Size: 8576 File Visible: - Signed: -
    Status: -

    Name: i8042prt.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\i8042prt.sys
    Address: 0xBA278000 Size: 52480 File Visible: - Signed: -
    Status: -

    Name: ialmdd5.DLL
    Image Path: C:\WINDOWS\System32\ialmdd5.DLL
    Address: 0xBF075000 Size: 925696 File Visible: - Signed: -
    Status: -

    Name: ialmdev5.DLL
    Image Path: C:\WINDOWS\System32\ialmdev5.DLL
    Address: 0xBF041000 Size: 212992 File Visible: - Signed: -
    Status: -

    Name: ialmdnt5.dll
    Image Path: C:\WINDOWS\System32\ialmdnt5.dll
    Address: 0xBF020000 Size: 135168 File Visible: - Signed: -
    Status: -

    Name: ialmnt5.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ialmnt5.sys
    Address: 0xB95AD000 Size: 1049056 File Visible: - Signed: -
    Status: -

    Name: ialmrnt5.dll
    Image Path: C:\WINDOWS\System32\ialmrnt5.dll
    Address: 0xBF012000 Size: 57344 File Visible: - Signed: -
    Status: -

    Name: imapi.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\imapi.sys
    Address: 0xBA288000 Size: 42112 File Visible: - Signed: -
    Status: -

    Name: intelide.sys
    Image Path: intelide.sys
    Address: 0xBA5AC000 Size: 5504 File Visible: - Signed: -
    Status: -

    Name: intelppm.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\intelppm.sys
    Address: 0xBA248000 Size: 36352 File Visible: - Signed: -
    Status: -

    Name: ipfltdrv.sys
    Image Path: C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
    Address: 0xA79BC000 Size: 32896 File Visible: - Signed: -
    Status: -

    Name: ipnat.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ipnat.sys
    Address: 0xA7FA3000 Size: 152832 File Visible: - Signed: -
    Status: -

    Name: ipsec.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ipsec.sys
    Address: 0xA8143000 Size: 75264 File Visible: - Signed: -
    Status: -

    Name: isapnp.sys
    Image Path: isapnp.sys
    Address: 0xBA0A8000 Size: 37248 File Visible: - Signed: -
    Status: -

    Name: iwca.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\iwca.sys
    Address: 0xB914E000 Size: 249856 File Visible: - Signed: -
    Status: -

    Name: kbdclass.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\kbdclass.sys
    Address: 0xBA470000 Size: 24576 File Visible: - Signed: -
    Status: -

    Name: kbdhid.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\kbdhid.sys
    Address: 0xB8FFC000 Size: 14592 File Visible: - Signed: -
    Status: -

    Name: KDCOM.DLL
    Image Path: C:\WINDOWS\system32\KDCOM.DLL
    Address: 0xBA5A8000 Size: 8192 File Visible: - Signed: -
    Status: -

    Name: ks.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ks.sys
    Address: 0xB918B000 Size: 143360 File Visible: - Signed: -
    Status: -

    Name: KSecDD.sys
    Image Path: KSecDD.sys
    Address: 0xB9EBF000 Size: 92928 File Visible: - Signed: -
    Status: -

    Name: ManyCam.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ManyCam.sys
    Address: 0xBA478000 Size: 21632 File Visible: - Signed: -
    Status: -

    Name: mdmxsdk.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
    Address: 0xA783B000 Size: 11840 File Visible: - Signed: -
    Status: -

    Name: mnmdd.SYS
    Image Path: C:\WINDOWS\System32\Drivers\mnmdd.SYS
    Address: 0xBA60A000 Size: 4224 File Visible: - Signed: -
    Status: -

    Name: Modem.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Modem.SYS
    Address: 0xBA480000 Size: 30080 File Visible: - Signed: -
    Status: -

    Name: mouclass.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\mouclass.sys
    Address: 0xBA468000 Size: 23040 File Visible: - Signed: -
    Status: -

    Name: mouhid.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\mouhid.sys
    Address: 0xB900C000 Size: 12160 File Visible: - Signed: -
    Status: -

    Name: MountMgr.sys
    Image Path: MountMgr.sys
    Address: 0xBA0B8000 Size: 42368 File Visible: - Signed: -
    Status: -

    Name: MpFirewall.sys
    Image Path: C:\WINDOWS\System32\Drivers\MpFirewall.sys
    Address: 0xA80D6000 Size: 80640 File Visible: - Signed: -
    Status: -

    Name: mrxdav.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\mrxdav.sys
    Address: 0xA784F000 Size: 180608 File Visible: - Signed: -
    Status: -

    Name: mrxsmb.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
    Address: 0xA7FC9000 Size: 455296 File Visible: - Signed: -
    Status: -

    Name: Msfs.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Msfs.SYS
    Address: 0xBA368000 Size: 19072 File Visible: - Signed: -
    Status: -

    Name: msgpc.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\msgpc.sys
    Address: 0xBA308000 Size: 35072 File Visible: - Signed: -
    Status: -

    Name: mssmbios.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\mssmbios.sys
    Address: 0xB9D9A000 Size: 15488 File Visible: - Signed: -
    Status: -

    Name: Mup.sys
    Image Path: Mup.sys
    Address: 0xB9DEB000 Size: 105344 File Visible: - Signed: -
    Status: -

    Name: NDIS.sys
    Image Path: NDIS.sys
    Address: 0xB9E05000 Size: 182656 File Visible: - Signed: -
    Status: -

    Name: ndistapi.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ndistapi.sys
    Address: 0xB9DB6000 Size: 10112 File Visible: - Signed: -
    Status: -

    Name: ndisuio.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ndisuio.sys
    Address: 0xA7D9F000 Size: 14592 File Visible: - Signed: -
    Status: -

    Name: ndiswan.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ndiswan.sys
    Address: 0xB9137000 Size: 91520 File Visible: - Signed: -
    Status: -

    Name: NDProxy.SYS
    Image Path: C:\WINDOWS\System32\Drivers\NDProxy.SYS
    Address: 0xBA138000 Size: 40576 File Visible: - Signed: -
    Status: -

    Name: netbios.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\netbios.sys
    Address: 0xB970E000 Size: 34688 File Visible: - Signed: -
    Status: -

    Name: netbt.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\netbt.sys
    Address: 0xA80AE000 Size: 162816 File Visible: - Signed: -
    Status: -

    Name: nic1394.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\nic1394.sys
    Address: 0xBA158000 Size: 61824 File Visible: - Signed: -
    Status: -

    Name: Npfs.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Npfs.SYS
    Address: 0xBA370000 Size: 30848 File Visible: - Signed: -
    Status: -

    Name: Ntfs.sys
    Image Path: Ntfs.sys
    Address: 0xB9E32000 Size: 574976 File Visible: - Signed: -
    Status: -

    Name: ntkrnlpa.exe
    Image Path: C:\WINDOWS\system32\ntkrnlpa.exe
    Address: 0x804D7000 Size: 2066048 File Visible: - Signed: -
    Status: -

    Name: Null.SYS
    Image Path: C:\WINDOWS\System32\Drivers\Null.SYS
    Address: 0xBA76A000 Size: 2944 File Visible: - Signed: -
    Status: -

    Name: ohci1394.sys
    Image Path: ohci1394.sys
    Address: 0xBA108000 Size: 61696 File Visible: - Signed: -
    Status: -

    Name: PartMgr.sys
    Image Path: PartMgr.sys
    Address: 0xBA330000 Size: 19712 File Visible: - Signed: -
    Status: -

    Name: pci.sys
    Image Path: pci.sys
    Address: 0xB9F68000 Size: 68224 File Visible: - Signed: -
    Status: -

    Name: pciide.sys
    Image Path: pciide.sys
    Address: 0xBA670000 Size: 3328 File Visible: - Signed: -
    Status: -

    Name: PCIIDEX.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\PCIIDEX.SYS
    Address: 0xBA328000 Size: 28672 File Visible: - Signed: -
    Status: -

    Name: PnpManager
    Image Path: \Driver\PnpManager
    Address: 0x804D7000 Size: 2066048 File Visible: - Signed: -
    Status: -

    Name: portcls.sys
    Image Path: C:\WINDOWS\system32\drivers\portcls.sys
    Address: 0xA819E000 Size: 147456 File Visible: - Signed: -
    Status: -

    Name: psched.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\psched.sys
    Address: 0xB90FE000 Size: 69120 File Visible: - Signed: -
    Status: -

    Name: ptilink.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\ptilink.sys
    Address: 0xBA498000 Size: 17792 File Visible: - Signed: -
    Status: -

    Name: PxHelp20.sys
    Image Path: PxHelp20.sys
    Address: 0xBA0F8000 Size: 36288 File Visible: - Signed: -
    Status: -

    Name: rasacd.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rasacd.sys
    Address: 0xB912F000 Size: 8832 File Visible: - Signed: -
    Status: -

    Name: rasl2tp.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
    Address: 0xBA2D8000 Size: 51328 File Visible: - Signed: -
    Status: -

    Name: raspppoe.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\raspppoe.sys
    Address: 0xBA2E8000 Size: 41472 File Visible: - Signed: -
    Status: -

    Name: raspptp.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\raspptp.sys
    Address: 0xBA2F8000 Size: 48384 File Visible: - Signed: -
    Status: -

    Name: raspti.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\raspti.sys
    Address: 0xBA4A0000 Size: 16512 File Visible: - Signed: -
    Status: -

    Name: RAW
    Image Path: \FileSystem\RAW
    Address: 0x804D7000 Size: 2066048 File Visible: - Signed: -
    Status: -

    Name: rdbss.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rdbss.sys
    Address: 0xA8061000 Size: 175744 File Visible: - Signed: -
    Status: -

    Name: RDPCDD.sys
    Image Path: C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
    Address: 0xBA60C000 Size: 4224 File Visible: - Signed: -
    Status: -

    Name: rdpdr.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rdpdr.sys
    Address: 0xB90CE000 Size: 196224 File Visible: - Signed: -
    Status: -

    Name: RDPWD.SYS
    Image Path: C:\WINDOWS\System32\Drivers\RDPWD.SYS
    Address: 0xA6F79000 Size: 139520 File Visible: - Signed: -
    Status: -

    Name: redbook.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\redbook.sys
    Address: 0xBA2A8000 Size: 57600 File Visible: - Signed: -
    Status: -

    Name: rimmptsk.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rimmptsk.sys
    Address: 0xBA460000 Size: 28544 File Visible: - Signed: -
    Status: -

    Name: rimsptsk.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rimsptsk.sys
    Address: 0xBA268000 Size: 51328 File Visible: - Signed: -
    Status: -

    Name: rixdptsk.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\rixdptsk.sys
    Address: 0xB94ED000 Size: 307968 File Visible: - Signed: -
    Status: -

    Name: RootMdm.sys
    Image Path: C:\WINDOWS\System32\Drivers\RootMdm.sys
    Address: 0xBA5F0000 Size: 5888 File Visible: - Signed: -
    Status: -

    Name: rootrepeal.sys
    Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
    Address: 0xA6F9C000 Size: 49152 File Visible: No Signed: -
    Status: -

    Name: s24trans.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\s24trans.sys
    Address: 0xA7DA3000 Size: 10432 File Visible: - Signed: -
    Status: -

    Name: sdbus.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\sdbus.sys
    Address: 0xB9539000 Size: 79232 File Visible: - Signed: -
    Status: -

    Name: sffdisk.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\sffdisk.sys
    Address: 0xBA578000 Size: 11904 File Visible: - Signed: -
    Status: -

    Name: sffp_sd.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\sffp_sd.sys
    Address: 0xBA574000 Size: 11008 File Visible: - Signed: -
    Status: -

    Name: srv.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\srv.sys
    Address: 0xA75DC000 Size: 333952 File Visible: - Signed: -
    Status: -

    Name: sscdbhk5.sys
    Image Path: C:\WINDOWS\system32\drivers\sscdbhk5.sys
    Address: 0xBA600000 Size: 5568 File Visible: - Signed: -
    Status: -

    Name: ssrtln.sys
    Image Path: C:\WINDOWS\system32\drivers\ssrtln.sys
    Address: 0xBA358000 Size: 23488 File Visible: - Signed: -
    Status: -

    Name: sthda.sys
    Image Path: C:\WINDOWS\system32\drivers\sthda.sys
    Address: 0xA81C2000 Size: 988096 File Visible: - Signed: -
    Status: -

    Name: STREAM.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\STREAM.SYS
    Address: 0xBA2C8000 Size: 53248 File Visible: - Signed: -
    Status: -

    Name: swenum.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\swenum.sys
    Address: 0xBA5F2000 Size: 4352 File Visible: - Signed: -
    Status: -

    Name: SynTP.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\SynTP.sys
    Address: 0xB91AE000 Size: 190560 File Visible: - Signed: -
    Status: -

    Name: sysaudio.sys
    Image Path: C:\WINDOWS\system32\drivers\sysaudio.sys
    Address: 0xBA198000 Size: 60800 File Visible: - Signed: -
    Status: -

    Name: tcpip.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\tcpip.sys
    Address: 0xA80EA000 Size: 361600 File Visible: - Signed: -
    Status: -

    Name: TDI.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\TDI.SYS
    Address: 0xBA488000 Size: 20480 File Visible: - Signed: -
    Status: -

    Name: TDTCP.SYS
    Image Path: C:\WINDOWS\System32\Drivers\TDTCP.SYS
    Address: 0xBA3B8000 Size: 21760 File Visible: - Signed: -
    Status: -

    Name: termdd.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\termdd.sys
    Address: 0xBA318000 Size: 40704 File Visible: - Signed: -
    Status: -

    Name: tfsnboio.sys
    Image Path: C:\WINDOWS\system32\dla\tfsnboio.sys
    Address: 0xBA3C8000 Size: 25824 File Visible: - Signed: -
    Status: -

    Name: tfsncofs.sys
    Image Path: C:\WINDOWS\system32\dla\tfsncofs.sys
    Address: 0xA7F23000 Size: 34784 File Visible: - Signed: -
    Status: -

    Name: tfsndrct.sys
    Image Path: C:\WINDOWS\system32\dla\tfsndrct.sys
    Address: 0xBA67D000 Size: 4064 File Visible: - Signed: -
    Status: -

    Name: tfsndres.sys
    Image Path: C:\WINDOWS\system32\dla\tfsndres.sys
    Address: 0xBA67A000 Size: 2176 File Visible: - Signed: -
    Status: -

    Name: tfsnifs.sys
    Image Path: C:\WINDOWS\system32\dla\tfsnifs.sys
    Address: 0xA7D49000 Size: 86528 File Visible: - Signed: -
    Status: -

    Name: tfsnopio.sys
    Image Path: C:\WINDOWS\system32\dla\tfsnopio.sys
    Address: 0xA7E8B000 Size: 15168 File Visible: - Signed: -
    Status: -

    Name: tfsnpool.sys
    Image Path: C:\WINDOWS\system32\dla\tfsnpool.sys
    Address: 0xBA660000 Size: 6304 File Visible: - Signed: -
    Status: -

    Name: tfsnudf.sys
    Image Path: C:\WINDOWS\system32\dla\tfsnudf.sys
    Address: 0xA7D30000 Size: 98656 File Visible: - Signed: -
    Status: -

    Name: tfsnudfa.sys
    Image Path: C:\WINDOWS\system32\dla\tfsnudfa.sys
    Address: 0xA7D17000 Size: 100544 File Visible: - Signed: -
    Status: -

    Name: update.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\update.sys
    Address: 0xB9070000 Size: 384768 File Visible: - Signed: -
    Status: -

    Name: usbaudio.sys
    Image Path: C:\WINDOWS\system32\drivers\usbaudio.sys
    Address: 0xB96AE000 Size: 60032 File Visible: - Signed: -
    Status: -

    Name: usbccgp.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\usbccgp.sys
    Address: 0xBA378000 Size: 32128 File Visible: - Signed: -
    Status: -

    Name: USBD.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\USBD.SYS
    Address: 0xBA5EE000 Size: 8192 File Visible: - Signed: -
    Status: -

    Name: usbehci.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\usbehci.sys
    Address: 0xBA458000 Size: 30208 File Visible: - Signed: -
    Status: -

    Name: usbhub.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\usbhub.sys
    Address: 0xB971E000 Size: 59520 File Visible: - Signed: -
    Status: -

    Name: USBPORT.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\USBPORT.SYS
    Address: 0xB954D000 Size: 147456 File Visible: - Signed: -
    Status: -

    Name: usbuhci.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\usbuhci.sys
    Address: 0xBA450000 Size: 20608 File Visible: - Signed: -
    Status: -

    Name: vga.sys
    Image Path: C:\WINDOWS\System32\drivers\vga.sys
    Address: 0xBA360000 Size: 20992 File Visible: - Signed: -
    Status: -

    Name: VIDEOPRT.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\VIDEOPRT.SYS
    Address: 0xB9599000 Size: 81920 File Visible: - Signed: -
    Status: -

    Name: VolSnap.sys
    Image Path: VolSnap.sys
    Address: 0xBA0C8000 Size: 52352 File Visible: - Signed: -
    Status: -

    Name: w29n51.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\w29n51.sys
    Address: 0xB91DD000 Size: 3210496 File Visible: - Signed: -
    Status: -

    Name: wanarp.sys
    Image Path: C:\WINDOWS\system32\DRIVERS\wanarp.sys
    Address: 0xB96DE000 Size: 34560 File Visible: - Signed: -
    Status: -

    Name: watchdog.sys
    Image Path: C:\WINDOWS\System32\watchdog.sys
    Address: 0xBA3A8000 Size: 20480 File Visible: - Signed: -
    Status: -

    Name: wdmaud.sys
    Image Path: C:\WINDOWS\system32\drivers\wdmaud.sys
    Address: 0xA7AAA000 Size: 83072 File Visible: - Signed: -
    Status: -

    Name: Win32k
    Image Path: \Driver\Win32k
    Address: 0xBF800000 Size: 1847296 File Visible: - Signed: -
    Status: -

    Name: win32k.sys
    Image Path: C:\WINDOWS\System32\win32k.sys
    Address: 0xBF800000 Size: 1847296 File Visible: - Signed: -
    Status: -

    Name: WMILIB.SYS
    Image Path: C:\WINDOWS\system32\DRIVERS\WMILIB.SYS
    Address: 0xBA5AA000 Size: 8192 File Visible: - Signed: -
    Status: -

    Name: WMIxWDM
    Image Path: \Driver\WMIxWDM
    Address: 0x804D7000 Size: 2066048 File Visible: - Signed: -
    Status: -

    Name: ws2ifsl.sys
    Image Path: C:\WINDOWS\System32\drivers\ws2ifsl.sys
    Address: 0xB912B000 Size: 12032 File Visible: - Signed: -
    Status: -
    Last edited by miami305; 09-02-09 at 02:08 PM. Reason: update

  4. #4
    Elite Member TonyT's Avatar
    Join Date
    Jan 2000
    Location
    Fairfax, VA
    Posts
    10,336
    Drivers are OK, do the other scans as well and post all logs. And look for anything in RED text.
    No one has any right to force data on you
    and command you to believe it or else.
    If it is not true for you, it isn't true.

    LRH

  5. #5
    Junior Member
    Join Date
    Sep 2009
    Location
    Mechanicsville, Maryland
    Posts
    5
    alright Im doing that now.

  6. #6
    Junior Member
    Join Date
    Sep 2009
    Location
    Mechanicsville, Maryland
    Posts
    5
    Shadow SSDT
    -------------------
    #: 000 Function Name: NtGdiAbortDoc
    Status: Not hooked

    For some reason it would not scan the stealth roots, and the processes were just normal nothin in red for any of the scans

    The thing is also everytime I scan With MalwareBytes It shows 2 rootkits and can never delete them I even tried to regedit and manually delete.





    #: 001 Function Name: NtGdiAbortPath
    Status: Not hooked

    #: 002 Function Name: NtGdiAddFontResourceW
    Status: Not hooked

    #: 003 Function Name: NtGdiAddRemoteFontToDC
    Status: Not hooked

    #: 004 Function Name: NtGdiAddFontMemResourceEx
    Status: Not hooked

    #: 005 Function Name: NtGdiRemoveMergeFont
    Status: Not hooked

    #: 006 Function Name: NtGdiAddRemoteMMInstanceToDC
    Status: Not hooked

    #: 007 Function Name: NtGdiAlphaBlend
    Status: Not hooked

    #: 008 Function Name: NtGdiAngleArc
    Status: Not hooked

    #: 009 Function Name: NtGdiAnyLinkedFonts
    Status: Not hooked

    #: 010 Function Name: NtGdiFontIsLinked
    Status: Not hooked

    #: 011 Function Name: NtGdiArcInternal
    Status: Not hooked

    #: 012 Function Name: NtGdiBeginPath
    Status: Not hooked

    #: 013 Function Name: NtGdiBitBlt
    Status: Not hooked

    #: 014 Function Name: NtGdiCancelDC
    Status: Not hooked

    #: 015 Function Name: NtGdiCheckBitmapBits
    Status: Not hooked

    #: 016 Function Name: NtGdiCloseFigure
    Status: Not hooked

    #: 017 Function Name: NtGdiClearBitmapAttributes
    Status: Not hooked

    #: 018 Function Name: NtGdiClearBrushAttributes
    Status: Not hooked

    #: 019 Function Name: NtGdiColorCorrectPalette
    Status: Not hooked

    #: 020 Function Name: NtGdiCombineRgn
    Status: Not hooked

    #: 021 Function Name: NtGdiCombineTransform
    Status: Not hooked

    #: 022 Function Name: NtGdiComputeXformCoefficients
    Status: Not hooked

    #: 023 Function Name: NtGdiConsoleTextOut
    Status: Not hooked

    #: 024 Function Name: NtGdiConvertMetafileRect
    Status: Not hooked

    #: 025 Function Name: NtGdiCreateBitmap
    Status: Not hooked

    #: 026 Function Name: NtGdiCreateClientObj
    Status: Not hooked

    #: 027 Function Name: NtGdiCreateColorSpace
    Status: Not hooked

    #: 028 Function Name: NtGdiCreateColorTransform
    Status: Not hooked

    #: 029 Function Name: NtGdiCreateCompatibleBitmap
    Status: Not hooked

    #: 030 Function Name: NtGdiCreateCompatibleDC
    Status: Not hooked

    #: 031 Function Name: NtGdiCreateDIBBrush
    Status: Not hooked

    #: 032 Function Name: NtGdiCreateDIBitmapInternal
    Status: Not hooked

    #: 033 Function Name: NtGdiCreateDIBSection
    Status: Not hooked

    #: 034 Function Name: NtGdiCreateEllipticRgn
    Status: Not hooked

    #: 035 Function Name: NtGdiCreateHalftonePalette
    Status: Not hooked

    #: 036 Function Name: NtGdiCreateHatchBrushInternal
    Status: Not hooked

    #: 037 Function Name: NtGdiCreateMetafileDC
    Status: Not hooked

    #: 038 Function Name: NtGdiCreatePaletteInternal
    Status: Not hooked

    #: 039 Function Name: NtGdiCreatePatternBrushInternal
    Status: Not hooked

    #: 040 Function Name: NtGdiCreatePen
    Status: Not hooked

    #: 041 Function Name: NtGdiCreateRectRgn
    Status: Not hooked

    #: 042 Function Name: NtGdiCreateRoundRectRgn
    Status: Not hooked

    #: 043 Function Name: NtGdiCreateServerMetaFile
    Status: Not hooked

    #: 044 Function Name: NtGdiCreateSolidBrush
    Status: Not hooked

    #: 045 Function Name: NtGdiD3dContextCreate
    Status: Not hooked

    #: 046 Function Name: NtGdiD3dContextDestroy
    Status: Not hooked

    #: 047 Function Name: NtGdiD3dContextDestroyAll
    Status: Not hooked

    #: 048 Function Name: NtGdiD3dValidateTextureStageState
    Status: Not hooked

    #: 049 Function Name: NtGdiD3dDrawPrimitives2
    Status: Not hooked

    #: 050 Function Name: NtGdiDdGetDriverState
    Status: Not hooked

    #: 051 Function Name: NtGdiDdAddAttachedSurface
    Status: Not hooked

    #: 052 Function Name: NtGdiDdAlphaBlt
    Status: Not hooked

    #: 053 Function Name: NtGdiDdAttachSurface
    Status: Not hooked

    #: 054 Function Name: NtGdiDdBeginMoCompFrame
    Status: Not hooked

    #: 055 Function Name: NtGdiDdBlt
    Status: Not hooked

    #: 056 Function Name: NtGdiDdCanCreateSurface
    Status: Not hooked

    #: 057 Function Name: NtGdiDdCanCreateD3DBuffer
    Status: Not hooked

    #: 058 Function Name: NtGdiDdColorControl
    Status: Not hooked

    #: 059 Function Name: NtGdiDdCreateDirectDrawObject
    Status: Not hooked

    #: 060 Function Name: NtGdiDdCreateSurface
    Status: Not hooked

    #: 061 Function Name: NtGdiDdCreateD3DBuffer
    Status: Not hooked

    #: 062 Function Name: NtGdiDdCreateMoComp
    Status: Not hooked

    #: 063 Function Name: NtGdiDdCreateSurfaceObject
    Status: Not hooked

    #: 064 Function Name: NtGdiDdDeleteDirectDrawObject
    Status: Not hooked

    #: 065 Function Name: NtGdiDdDeleteSurfaceObject
    Status: Not hooked

    #: 066 Function Name: NtGdiDdDestroyMoComp
    Status: Not hooked

    #: 067 Function Name: NtGdiDdDestroySurface
    Status: Not hooked

    #: 068 Function Name: NtGdiDdDestroyD3DBuffer
    Status: Not hooked

    #: 069 Function Name: NtGdiDdEndMoCompFrame
    Status: Not hooked

    #: 070 Function Name: NtGdiDdFlip
    Status: Not hooked

    #: 071 Function Name: NtGdiDdFlipToGDISurface
    Status: Not hooked

    #: 072 Function Name: NtGdiDdGetAvailDriverMemory
    Status: Not hooked

    #: 073 Function Name: NtGdiDdGetBltStatus
    Status: Not hooked

    #: 074 Function Name: NtGdiDdGetDC
    Status: Not hooked

    #: 075 Function Name: NtGdiDdGetDriverInfo
    Status: Not hooked

    #: 076 Function Name: NtGdiDdGetDxHandle
    Status: Not hooked

    #: 077 Function Name: NtGdiDdGetFlipStatus
    Status: Not hooked

    #: 078 Function Name: NtGdiDdGetInternalMoCompInfo
    Status: Not hooked

    #: 079 Function Name: NtGdiDdGetMoCompBuffInfo
    Status: Not hooked

    #: 080 Function Name: NtGdiDdGetMoCompGuids
    Status: Not hooked

    #: 081 Function Name: NtGdiDdGetMoCompFormats
    Status: Not hooked

    #: 082 Function Name: NtGdiDdGetScanLine
    Status: Not hooked

    #: 083 Function Name: NtGdiDdLock
    Status: Not hooked

    #: 084 Function Name: NtGdiDdLockD3D
    Status: Not hooked

    #: 085 Function Name: NtGdiDdQueryDirectDrawObject
    Status: Not hooked

    #: 086 Function Name: NtGdiDdQueryMoCompStatus
    Status: Not hooked

    #: 087 Function Name: NtGdiDdReenableDirectDrawObject
    Status: Not hooked

    #: 088 Function Name: NtGdiDdReleaseDC
    Status: Not hooked

    #: 089 Function Name: NtGdiDdRenderMoComp
    Status: Not hooked

    #: 090 Function Name: NtGdiDdResetVisrgn
    Status: Not hooked

    #: 091 Function Name: NtGdiDdSetColorKey
    Status: Not hooked

    #: 092 Function Name: NtGdiDdSetExclusiveMode
    Status: Not hooked

    #: 093 Function Name: NtGdiDdSetGammaRamp
    Status: Not hooked

    #: 094 Function Name: NtGdiDdCreateSurfaceEx
    Status: Not hooked

    #: 095 Function Name: NtGdiDdSetOverlayPosition
    Status: Not hooked

    #: 096 Function Name: NtGdiDdUnattachSurface
    Status: Not hooked

    #: 097 Function Name: NtGdiDdUnlock
    Status: Not hooked

    #: 098 Function Name: NtGdiDdUnlockD3D
    Status: Not hooked

    #: 099 Function Name: NtGdiDdUpdateOverlay
    Status: Not hooked

    #: 100 Function Name: NtGdiDdWaitForVerticalBlank
    Status: Not hooked

    #: 101 Function Name: NtGdiDvpCanCreateVideoPort
    Status: Not hooked

    #: 102 Function Name: NtGdiDvpColorControl
    Status: Not hooked

    #: 103 Function Name: NtGdiDvpCreateVideoPort
    Status: Not hooked

    #: 104 Function Name: NtGdiDvpDestroyVideoPort
    Status: Not hooked

    #: 105 Function Name: NtGdiDvpFlipVideoPort
    Status: Not hooked

    #: 106 Function Name: NtGdiDvpGetVideoPortBandwidth
    Status: Not hooked

    #: 107 Function Name: NtGdiDvpGetVideoPortField
    Status: Not hooked

    #: 108 Function Name: NtGdiDvpGetVideoPortFlipStatus
    Status: Not hooked

    #: 109 Function Name: NtGdiDvpGetVideoPortInputFormats
    Status: Not hooked

    #: 110 Function Name: NtGdiDvpGetVideoPortLine
    Status: Not hooked

    #: 111 Function Name: NtGdiDvpGetVideoPortOutputFormats
    Status: Not hooked

    #: 112 Function Name: NtGdiDvpGetVideoPortConnectInfo
    Status: Not hooked

    #: 113 Function Name: NtGdiDvpGetVideoSignalStatus
    Status: Not hooked

    #: 114 Function Name: NtGdiDvpUpdateVideoPort
    Status: Not hooked

    #: 115 Function Name: NtGdiDvpWaitForVideoPortSync
    Status: Not hooked

    #: 116 Function Name: NtGdiDvpAcquireNotification
    Status: Not hooked

    #: 117 Function Name: NtGdiDvpReleaseNotification
    Status: Not hooked

    #: 118 Function Name: NtGdiDxgGenericThunk
    Status: Not hooked

    #: 119 Function Name: NtGdiDeleteClientObj
    Status: Not hooked

    #: 120 Function Name: NtGdiDeleteColorSpace
    Status: Not hooked

    #: 121 Function Name: NtGdiDeleteColorTransform
    Status: Not hooked

    #: 122 Function Name: NtGdiDeleteObjectApp
    Status: Not hooked

    #: 123 Function Name: NtGdiDescribePixelFormat
    Status: Not hooked

    #: 124 Function Name: NtGdiGetPerBandInfo
    Status: Not hooked

    #: 125 Function Name: NtGdiDoBanding
    Status: Not hooked

    #: 126 Function Name: NtGdiDoPalette
    Status: Not hooked

    #: 127 Function Name: NtGdiDrawEscape
    Status: Not hooked

    #: 128 Function Name: NtGdiEllipse
    Status: Not hooked

    #: 129 Function Name: NtGdiEnableEudc
    Status: Not hooked

    #: 130 Function Name: NtGdiEndDoc
    Status: Not hooked

    #: 131 Function Name: NtGdiEndPage
    Status: Not hooked

    #: 132 Function Name: NtGdiEndPath
    Status: Not hooked

    #: 133 Function Name: NtGdiEnumFontChunk
    Status: Not hooked

    #: 134 Function Name: NtGdiEnumFontClose
    Status: Not hooked

    #: 135 Function Name: NtGdiEnumFontOpen
    Status: Not hooked

    #: 136 Function Name: NtGdiEnumObjects
    Status: Not hooked

    #: 137 Function Name: NtGdiEqualRgn
    Status: Not hooked

    #: 138 Function Name: NtGdiEudcLoadUnloadLink
    Status: Not hooked

    #: 139 Function Name: NtGdiExcludeClipRect
    Status: Not hooked

    #: 140 Function Name: NtGdiExtCreatePen
    Status: Not hooked

    #: 141 Function Name: NtGdiExtCreateRegion
    Status: Not hooked

    #: 142 Function Name: NtGdiExtEscape
    Status: Not hooked

    #: 143 Function Name: NtGdiExtFloodFill
    Status: Not hooked

    #: 144 Function Name: NtGdiExtGetObjectW
    Status: Not hooked

    #: 145 Function Name: NtGdiExtSelectClipRgn
    Status: Not hooked

    #: 146 Function Name: NtGdiExtTextOutW
    Status: Not hooked

    #: 147 Function Name: NtGdiFillPath
    Status: Not hooked

    #: 148 Function Name: NtGdiFillRgn
    Status: Not hooked

    #: 149 Function Name: NtGdiFlattenPath
    Status: Not hooked

    #: 150 Function Name: NtGdiFlushUserBatch
    Status: Not hooked

    #: 151 Function Name: NtGdiFlush
    Status: Not hooked

    #: 152 Function Name: NtGdiForceUFIMapping
    Status: Not hooked

    #: 153 Function Name: NtGdiFrameRgn
    Status: Not hooked

    #: 154 Function Name: NtGdiFullscreenControl
    Status: Not hooked

    #: 155 Function Name: NtGdiGetAndSetDCDword
    Status: Not hooked

    #: 156 Function Name: NtGdiGetAppClipBox
    Status: Not hooked

    #: 157 Function Name: NtGdiGetBitmapBits
    Status: Not hooked

    #: 158 Function Name: NtGdiGetBitmapDimension
    Status: Not hooked

    #: 159 Function Name: NtGdiGetBoundsRect
    Status: Not hooked

    #: 160 Function Name: NtGdiGetCharABCWidthsW
    Status: Not hooked

    #: 161 Function Name: NtGdiGetCharacterPlacementW
    Status: Not hooked

    #: 162 Function Name: NtGdiGetCharSet
    Status: Not hooked

    #: 163 Function Name: NtGdiGetCharWidthW
    Status: Not hooked

    #: 164 Function Name: NtGdiGetCharWidthInfo
    Status: Not hooked

    #: 165 Function Name: NtGdiGetColorAdjustment
    Status: Not hooked

    #: 166 Function Name: NtGdiGetColorSpaceforBitmap
    Status: Not hooked

    #: 167 Function Name: NtGdiGetDCDword
    Status: Not hooked

    #: 168 Function Name: NtGdiGetDCforBitmap
    Status: Not hooked

    #: 169 Function Name: NtGdiGetDCObject
    Status: Not hooked

    #: 170 Function Name: NtGdiGetDCPoint
    Status: Not hooked

    #: 171 Function Name: NtGdiGetDeviceCaps
    Status: Not hooked

    #: 172 Function Name: NtGdiGetDeviceGammaRamp
    Status: Not hooked

    #: 173 Function Name: NtGdiGetDeviceCapsAll
    Status: Not hooked

    #: 174 Function Name: NtGdiGetDIBitsInternal
    Status: Not hooked

    #: 175 Function Name: NtGdiGetETM
    Status: Not hooked

    #: 176 Function Name: NtGdiGetEudcTimeStampEx
    Status: Not hooked

    #: 177 Function Name: NtGdiGetFontData
    Status: Not hooked

    #: 178 Function Name: NtGdiGetFontResourceInfoInternalW
    Status: Not hooked

    #: 179 Function Name: NtGdiGetGlyphIndicesW
    Status: Not hooked

    #: 180 Function Name: NtGdiGetGlyphIndicesWInternal
    Status: Not hooked

    #: 181 Function Name: NtGdiGetGlyphOutline
    Status: Not hooked

    #: 182 Function Name: NtGdiGetKerningPairs
    Status: Not hooked

    #: 183 Function Name: NtGdiGetLinkedUFIs
    Status: Not hooked

    #: 184 Function Name: NtGdiGetMiterLimit
    Status: Not hooked

    #: 185 Function Name: NtGdiGetMonitorID
    Status: Not hooked

    #: 186 Function Name: NtGdiGetNearestColor
    Status: Not hooked

    #: 187 Function Name: NtGdiGetNearestPaletteIndex
    Status: Not hooked

    #: 188 Function Name: NtGdiGetObjectBitmapHandle
    Status: Not hooked

    #: 189 Function Name: NtGdiGetOutlineTextMetricsInternalW
    Status: Not hooked

    #: 190 Function Name: NtGdiGetPath
    Status: Not hooked

    #: 191 Function Name: NtGdiGetPixel
    Status: Not hooked

    #: 192 Function Name: NtGdiGetRandomRgn
    Status: Not hooked

    #: 193 Function Name: NtGdiGetRasterizerCaps
    Status: Not hooked

    #: 194 Function Name: NtGdiGetRealizationInfo
    Status: Not hooked

    #: 195 Function Name: NtGdiGetRegionData
    Status: Not hooked

    #: 196 Function Name: NtGdiGetRgnBox
    Status: Not hooked

    #: 197 Function Name: NtGdiGetServerMetaFileBits
    Status: Not hooked

    #: 198 Function Name: NtGdiGetSpoolMessage
    Status: Not hooked

    #: 199 Function Name: NtGdiGetStats
    Status: Not hooked

    #: 200 Function Name: NtGdiGetStockObject
    Status: Not hooked

    #: 201 Function Name: NtGdiGetStringBitmapW
    Status: Not hooked

    #: 202 Function Name: NtGdiGetSystemPaletteUse
    Status: Not hooked

    #: 203 Function Name: NtGdiGetTextCharsetInfo
    Status: Not hooked

    #: 204 Function Name: NtGdiGetTextExtent
    Status: Not hooked

    #: 205 Function Name: NtGdiGetTextExtentExW
    Status: Not hooked

    #: 206 Function Name: NtGdiGetTextFaceW
    Status: Not hooked

    #: 207 Function Name: NtGdiGetTextMetricsW
    Status: Not hooked

    #: 208 Function Name: NtGdiGetTransform
    Status: Not hooked

    #: 209 Function Name: NtGdiGetUFI
    Status: Not hooked

    #: 210 Function Name: NtGdiGetEmbUFI
    Status: Not hooked

    #: 211 Function Name: NtGdiGetUFIPathname
    Status: Not hooked

    #: 212 Function Name: NtGdiGetEmbedFonts
    Status: Not hooked

    #: 213 Function Name: NtGdiChangeGhostFont
    Status: Not hooked

    #: 214 Function Name: NtGdiAddEmbFontToDC
    Status: Not hooked

    #: 215 Function Name: NtGdiGetFontUnicodeRanges
    Status: Not hooked

    #: 216 Function Name: NtGdiGetWidthTable
    Status: Not hooked

    #: 217 Function Name: NtGdiGradientFill
    Status: Not hooked

    #: 218 Function Name: NtGdiHfontCreate
    Status: Not hooked

    #: 219 Function Name: NtGdiIcmBrushInfo
    Status: Not hooked

    #: 220 Function Name: NtGdiInit
    Status: Not hooked

    #: 221 Function Name: NtGdiInitSpool
    Status: Not hooked

    #: 222 Function Name: NtGdiIntersectClipRect
    Status: Not hooked

    #: 223 Function Name: NtGdiInvertRgn
    Status: Not hooked

    #: 224 Function Name: NtGdiLineTo
    Status: Not hooked

    #: 225 Function Name: NtGdiMakeFontDir
    Status: Not hooked

    #: 226 Function Name: NtGdiMakeInfoDC
    Status: Not hooked

    #: 227 Function Name: NtGdiMaskBlt
    Status: Not hooked

    #: 228 Function Name: NtGdiModifyWorldTransform
    Status: Not hooked

    #: 229 Function Name: NtGdiMonoBitmap
    Status: Not hooked

    #: 230 Function Name: NtGdiMoveTo
    Status: Not hooked

    #: 231 Function Name: NtGdiOffsetClipRgn
    Status: Not hooked

    #: 232 Function Name: NtGdiOffsetRgn
    Status: Not hooked

    #: 233 Function Name: NtGdiOpenDCW
    Status: Not hooked

    #: 234 Function Name: NtGdiPatBlt
    Status: Not hooked

    #: 235 Function Name: NtGdiPolyPatBlt
    Status: Not hooked

    #: 236 Function Name: NtGdiPathToRegion
    Status: Not hooked

    #: 237 Function Name: NtGdiPlgBlt
    Status: Not hooked

    #: 238 Function Name: NtGdiPolyDraw
    Status: Not hooked

    #: 239 Function Name: NtGdiPolyPolyDraw
    Status: Not hooked

    #: 240 Function Name: NtGdiPolyTextOutW
    Status: Not hooked

    #: 241 Function Name: NtGdiPtInRegion
    Status: Not hooked

    #: 242 Function Name: NtGdiPtVisible
    Status: Not hooked

    #: 243 Function Name: NtGdiQueryFonts
    Status: Not hooked

    #: 244 Function Name: NtGdiQueryFontAssocInfo
    Status: Not hooked

    #: 245 Function Name: NtGdiRectangle
    Status: Not hooked

    #: 246 Function Name: NtGdiRectInRegion
    Status: Not hooked

    #: 247 Function Name: NtGdiRectVisible
    Status: Not hooked

    #: 248 Function Name: NtGdiRemoveFontResourceW
    Status: Not hooked

    #: 249 Function Name: NtGdiRemoveFontMemResourceEx
    Status: Not hooked

    #: 250 Function Name: NtGdiResetDC
    Status: Not hooked

    #: 251 Function Name: NtGdiResizePalette
    Status: Not hooked

    #: 252 Function Name: NtGdiRestoreDC
    Status: Not hooked

    #: 253 Function Name: NtGdiRoundRect
    Status: Not hooked

    #: 254 Function Name: NtGdiSaveDC
    Status: Not hooked

    #: 255 Function Name: NtGdiScaleViewportExtEx
    Status: Not hooked

    #: 256 Function Name: NtGdiScaleWindowExtEx
    Status: Not hooked

    #: 257 Function Name: NtGdiSelectBitmap
    Status: Not hooked

    #: 258 Function Name: NtGdiSelectBrush
    Status: Not hooked

    #: 259 Function Name: NtGdiSelectClipPath
    Status: Not hooked

    #: 260 Function Name: NtGdiSelectFont
    Status: Not hooked

    #: 261 Function Name: NtGdiSelectPen
    Status: Not hooked

    #: 262 Function Name: NtGdiSetBitmapAttributes
    Status: Not hooked

    #: 263 Function Name: NtGdiSetBitmapBits
    Status: Not hooked

    #: 264 Function Name: NtGdiSetBitmapDimension
    Status: Not hooked

    #: 265 Function Name: NtGdiSetBoundsRect
    Status: Not hooked

    #: 266 Function Name: NtGdiSetBrushAttributes
    Status: Not hooked

    #: 267 Function Name: NtGdiSetBrushOrg
    Status: Not hooked

    #: 268 Function Name: NtGdiSetColorAdjustment
    Status: Not hooked

    #: 269 Function Name: NtGdiSetColorSpace
    Status: Not hooked

    #: 270 Function Name: NtGdiSetDeviceGammaRamp
    Status: Not hooked

    #: 271 Function Name: NtGdiSetDIBitsToDeviceInternal
    Status: Not hooked

    #: 272 Function Name: NtGdiSetFontEnumeration
    Status: Not hooked

    #: 273 Function Name: NtGdiSetFontXform
    Status: Not hooked

    #: 274 Function Name: NtGdiSetIcmMode
    Status: Not hooked

    #: 275 Function Name: NtGdiSetLinkedUFIs
    Status: Not hooked

    #: 276 Function Name: NtGdiSetMagicColors
    Status: Not hooked

    #: 277 Function Name: NtGdiSetMetaRgn
    Status: Not hooked

    #: 278 Function Name: NtGdiSetMiterLimit
    Status: Not hooked

    #: 279 Function Name: NtGdiGetDeviceWidth
    Status: Not hooked

    #: 280 Function Name: NtGdiMirrorWindowOrg
    Status: Not hooked

    #: 281 Function Name: NtGdiSetLayout
    Status: Not hooked

    #: 282 Function Name: NtGdiSetPixel
    Status: Not hooked

    #: 283 Function Name: NtGdiSetPixelFormat
    Status: Not hooked

    #: 284 Function Name: NtGdiSetRectRgn
    Status: Not hooked

    #: 285 Function Name: NtGdiSetSystemPaletteUse
    Status: Not hooked

    #: 286 Function Name: NtGdiSetTextJustification
    Status: Not hooked

    #: 287 Function Name: NtGdiSetupPublicCFONT
    Status: Not hooked

    #: 288 Function Name: NtGdiSetVirtualResolution
    Status: Not hooked

    #: 289 Function Name: NtGdiSetSizeDevice
    Status: Not hooked

    #: 290 Function Name: NtGdiStartDoc
    Status: Not hooked

    #: 291 Function Name: NtGdiStartPage
    Status: Not hooked

    #: 292 Function Name: NtGdiStretchBlt
    Status: Not hooked

    #: 293 Function Name: NtGdiStretchDIBitsInternal
    Status: Not hooked

    #: 294 Function Name: NtGdiStrokeAndFillPath
    Status: Not hooked

    #: 295 Function Name: NtGdiStrokePath
    Status: Not hooked

    #: 296 Function Name: NtGdiSwapBuffers
    Status: Not hooked

  7. #7
    Junior Member
    Join Date
    Sep 2009
    Location
    Mechanicsville, Maryland
    Posts
    5
    #: 297 Function Name: NtGdiTransformPoints
    Status: Not hooked

    #: 298 Function Name: NtGdiTransparentBlt
    Status: Not hooked

    #: 299 Function Name: NtGdiUnloadPrinterDriver
    Status: Not hooked

    #: 300 Function Name: NtGdiUnmapMemFont
    Status: Not hooked

    #: 301 Function Name: NtGdiUnrealizeObject
    Status: Not hooked

    #: 302 Function Name: NtGdiUpdateColors
    Status: Not hooked

    #: 303 Function Name: NtGdiWidenPath
    Status: Not hooked

    #: 304 Function Name: NtUserActivateKeyboardLayout
    Status: Not hooked

    #: 305 Function Name: NtUserAlterWindowStyle
    Status: Not hooked

    #: 306 Function Name: NtUserAssociateInputContext
    Status: Not hooked

    #: 307 Function Name: NtUserAttachThreadInput
    Status: Not hooked

    #: 308 Function Name: NtUserBeginPaint
    Status: Not hooked

    #: 309 Function Name: NtUserBitBltSysBmp
    Status: Not hooked

    #: 310 Function Name: NtUserBlockInput
    Status: Not hooked

    #: 311 Function Name: NtUserBuildHimcList
    Status: Not hooked

    #: 312 Function Name: NtUserBuildHwndList
    Status: Not hooked

    #: 313 Function Name: NtUserBuildNameList
    Status: Not hooked

    #: 314 Function Name: NtUserBuildPropList
    Status: Not hooked

    #: 315 Function Name: NtUserCallHwnd
    Status: Not hooked

    #: 316 Function Name: NtUserCallHwndLock
    Status: Not hooked

    #: 317 Function Name: NtUserCallHwndOpt
    Status: Not hooked

    #: 318 Function Name: NtUserCallHwndParam
    Status: Not hooked

    #: 319 Function Name: NtUserCallHwndParamLock
    Status: Not hooked

    #: 320 Function Name: NtUserCallMsgFilter
    Status: Not hooked

    #: 321 Function Name: NtUserCallNextHookEx
    Status: Not hooked

    #: 322 Function Name: NtUserCallNoParam
    Status: Not hooked

    #: 323 Function Name: NtUserCallOneParam
    Status: Not hooked

    #: 324 Function Name: NtUserCallTwoParam
    Status: Not hooked

    #: 325 Function Name: NtUserChangeClipboardChain
    Status: Not hooked

    #: 326 Function Name: NtUserChangeDisplaySettings
    Status: Not hooked

    #: 327 Function Name: NtUserCheckImeHotKey
    Status: Not hooked

    #: 328 Function Name: NtUserCheckMenuItem
    Status: Not hooked

    #: 329 Function Name: NtUserChildWindowFromPointEx
    Status: Not hooked

    #: 330 Function Name: NtUserClipCursor
    Status: Not hooked

    #: 331 Function Name: NtUserCloseClipboard
    Status: Not hooked

    #: 332 Function Name: NtUserCloseDesktop
    Status: Not hooked

    #: 333 Function Name: NtUserCloseWindowStation
    Status: Not hooked

    #: 334 Function Name: NtUserConsoleControl
    Status: Not hooked

    #: 335 Function Name: NtUserConvertMemHandle
    Status: Not hooked

    #: 336 Function Name: NtUserCopyAcceleratorTable
    Status: Not hooked

    #: 337 Function Name: NtUserCountClipboardFormats
    Status: Not hooked

    #: 338 Function Name: NtUserCreateAcceleratorTable
    Status: Not hooked

    #: 339 Function Name: NtUserCreateCaret
    Status: Not hooked

    #: 340 Function Name: NtUserCreateDesktop
    Status: Not hooked

    #: 341 Function Name: NtUserCreateInputContext
    Status: Not hooked

    #: 342 Function Name: NtUserCreateLocalMemHandle
    Status: Not hooked

    #: 343 Function Name: NtUserCreateWindowEx
    Status: Not hooked

    #: 344 Function Name: NtUserCreateWindowStation
    Status: Not hooked

    #: 345 Function Name: NtUserDdeGetQualityOfService
    Status: Not hooked

    #: 346 Function Name: NtUserDdeInitialize
    Status: Not hooked

    #: 347 Function Name: NtUserDdeSetQualityOfService
    Status: Not hooked

    #: 348 Function Name: NtUserDeferWindowPos
    Status: Not hooked

    #: 349 Function Name: NtUserDefSetText
    Status: Not hooked

    #: 350 Function Name: NtUserDeleteMenu
    Status: Not hooked

    #: 351 Function Name: NtUserDestroyAcceleratorTable
    Status: Not hooked

    #: 352 Function Name: NtUserDestroyCursor
    Status: Not hooked

    #: 353 Function Name: NtUserDestroyInputContext
    Status: Not hooked

    #: 354 Function Name: NtUserDestroyMenu
    Status: Not hooked

    #: 355 Function Name: NtUserDestroyWindow
    Status: Not hooked

    #: 356 Function Name: NtUserDisableThreadIme
    Status: Not hooked

    #: 357 Function Name: NtUserDispatchMessage
    Status: Not hooked

    #: 358 Function Name: NtUserDragDetect
    Status: Not hooked

    #: 359 Function Name: NtUserDragObject
    Status: Not hooked

    #: 360 Function Name: NtUserDrawAnimatedRects
    Status: Not hooked

    #: 361 Function Name: NtUserDrawCaption
    Status: Not hooked

    #: 362 Function Name: NtUserDrawCaptionTemp
    Status: Not hooked

    #: 363 Function Name: NtUserDrawIconEx
    Status: Not hooked

    #: 364 Function Name: NtUserDrawMenuBarTemp
    Status: Not hooked

    #: 365 Function Name: NtUserEmptyClipboard
    Status: Not hooked

    #: 366 Function Name: NtUserEnableMenuItem
    Status: Not hooked

    #: 367 Function Name: NtUserEnableScrollBar
    Status: Not hooked

    #: 368 Function Name: NtUserEndDeferWindowPosEx
    Status: Not hooked

    #: 369 Function Name: NtUserEndMenu
    Status: Not hooked

    #: 370 Function Name: NtUserEndPaint
    Status: Not hooked

    #: 371 Function Name: NtUserEnumDisplayDevices
    Status: Not hooked

    #: 372 Function Name: NtUserEnumDisplayMonitors
    Status: Not hooked

    #: 373 Function Name: NtUserEnumDisplaySettings
    Status: Not hooked

    #: 374 Function Name: NtUserEvent
    Status: Not hooked

    #: 375 Function Name: NtUserExcludeUpdateRgn
    Status: Not hooked

    #: 376 Function Name: NtUserFillWindow
    Status: Not hooked

    #: 377 Function Name: NtUserFindExistingCursorIcon
    Status: Not hooked

    #: 378 Function Name: NtUserFindWindowEx
    Status: Not hooked

    #: 379 Function Name: NtUserFlashWindowEx
    Status: Not hooked

    #: 380 Function Name: NtUserGetAltTabInfo
    Status: Not hooked

    #: 381 Function Name: NtUserGetAncestor
    Status: Not hooked

    #: 382 Function Name: NtUserGetAppImeLevel
    Status: Not hooked

    #: 383 Function Name: NtUserGetAsyncKeyState
    Status: Not hooked

    #: 384 Function Name: NtUserGetAtomName
    Status: Not hooked

    #: 385 Function Name: NtUserGetCaretBlinkTime
    Status: Not hooked

    #: 386 Function Name: NtUserGetCaretPos
    Status: Not hooked

    #: 387 Function Name: NtUserGetClassInfo
    Status: Not hooked

    #: 388 Function Name: NtUserGetClassName
    Status: Not hooked

    #: 389 Function Name: NtUserGetClipboardData
    Status: Not hooked

    #: 390 Function Name: NtUserGetClipboardFormatName
    Status: Not hooked

    #: 391 Function Name: NtUserGetClipboardOwner
    Status: Not hooked

    #: 392 Function Name: NtUserGetClipboardSequenceNumber
    Status: Not hooked

    #: 393 Function Name: NtUserGetClipboardViewer
    Status: Not hooked

    #: 394 Function Name: NtUserGetClipCursor
    Status: Not hooked

    #: 395 Function Name: NtUserGetComboBoxInfo
    Status: Not hooked

    #: 396 Function Name: NtUserGetControlBrush
    Status: Not hooked

    #: 397 Function Name: NtUserGetControlColor
    Status: Not hooked

    #: 398 Function Name: NtUserGetCPD
    Status: Not hooked

    #: 399 Function Name: NtUserGetCursorFrameInfo
    Status: Not hooked

    #: 400 Function Name: NtUserGetCursorInfo
    Status: Not hooked

    #: 401 Function Name: NtUserGetDC
    Status: Not hooked

    #: 402 Function Name: NtUserGetDCEx
    Status: Not hooked

    #: 403 Function Name: NtUserGetDoubleClickTime
    Status: Not hooked

    #: 404 Function Name: NtUserGetForegroundWindow
    Status: Not hooked

    #: 405 Function Name: NtUserGetGuiResources
    Status: Not hooked

    #: 406 Function Name: NtUserGetGUIThreadInfo
    Status: Not hooked

    #: 407 Function Name: NtUserGetIconInfo
    Status: Not hooked

    #: 408 Function Name: NtUserGetIconSize
    Status: Not hooked

    #: 409 Function Name: NtUserGetImeHotKey
    Status: Not hooked

    #: 410 Function Name: NtUserGetImeInfoEx
    Status: Not hooked

    #: 411 Function Name: NtUserGetInternalWindowPos
    Status: Not hooked

    #: 412 Function Name: NtUserGetKeyboardLayoutList
    Status: Not hooked

    #: 413 Function Name: NtUserGetKeyboardLayoutName
    Status: Not hooked

    #: 414 Function Name: NtUserGetKeyboardState
    Status: Not hooked

    #: 415 Function Name: NtUserGetKeyNameText
    Status: Not hooked

    #: 416 Function Name: NtUserGetKeyState
    Status: Not hooked

    #: 417 Function Name: NtUserGetListBoxInfo
    Status: Not hooked

    #: 418 Function Name: NtUserGetMenuBarInfo
    Status: Not hooked

    #: 419 Function Name: NtUserGetMenuIndex
    Status: Not hooked

    #: 420 Function Name: NtUserGetMenuItemRect
    Status: Not hooked

    #: 421 Function Name: NtUserGetMessage
    Status: Not hooked

    #: 422 Function Name: NtUserGetMouseMovePointsEx
    Status: Not hooked

    #: 423 Function Name: NtUserGetObjectInformation
    Status: Not hooked

    #: 424 Function Name: NtUserGetOpenClipboardWindow
    Status: Not hooked

    #: 425 Function Name: NtUserGetPriorityClipboardFormat
    Status: Not hooked

    #: 426 Function Name: NtUserGetProcessWindowStation
    Status: Not hooked

    #: 427 Function Name: NtUserGetRawInputBuffer
    Status: Not hooked

    #: 428 Function Name: NtUserGetRawInputData
    Status: Not hooked

    #: 429 Function Name: NtUserGetRawInputDeviceInfo
    Status: Not hooked

    #: 430 Function Name: NtUserGetRawInputDeviceList
    Status: Not hooked

    #: 431 Function Name: NtUserGetRegisteredRawInputDevices
    Status: Not hooked

    #: 432 Function Name: NtUserGetScrollBarInfo
    Status: Not hooked

    #: 433 Function Name: NtUserGetSystemMenu
    Status: Not hooked

    #: 434 Function Name: NtUserGetThreadDesktop
    Status: Not hooked

    #: 435 Function Name: NtUserGetThreadState
    Status: Not hooked

    #: 436 Function Name: NtUserGetTitleBarInfo
    Status: Not hooked

    #: 437 Function Name: NtUserGetUpdateRect
    Status: Not hooked

    #: 438 Function Name: NtUserGetUpdateRgn
    Status: Not hooked

    #: 439 Function Name: NtUserGetWindowDC
    Status: Not hooked

    #: 440 Function Name: NtUserGetWindowPlacement
    Status: Not hooked

    #: 441 Function Name: NtUserGetWOWClass
    Status: Not hooked

    #: 442 Function Name: NtUserHardErrorControl
    Status: Not hooked

    #: 443 Function Name: NtUserHideCaret
    Status: Not hooked

    #: 444 Function Name: NtUserHiliteMenuItem
    Status: Not hooked

    #: 445 Function Name: NtUserImpersonateDdeClientWindow
    Status: Not hooked

    #: 446 Function Name: NtUserInitialize
    Status: Not hooked

    #: 447 Function Name: NtUserInitializeClientPfnArrays
    Status: Not hooked

    #: 448 Function Name: NtUserInitTask
    Status: Not hooked

    #: 449 Function Name: NtUserInternalGetWindowText
    Status: Not hooked

    #: 450 Function Name: NtUserInvalidateRect
    Status: Not hooked

    #: 451 Function Name: NtUserInvalidateRgn
    Status: Not hooked

    #: 452 Function Name: NtUserIsClipboardFormatAvailable
    Status: Not hooked

    #: 453 Function Name: NtUserKillTimer
    Status: Not hooked

    #: 454 Function Name: NtUserLoadKeyboardLayoutEx
    Status: Not hooked

    #: 455 Function Name: NtUserLockWindowStation
    Status: Not hooked

    #: 456 Function Name: NtUserLockWindowUpdate
    Status: Not hooked

    #: 457 Function Name: NtUserLockWorkStation
    Status: Not hooked

    #: 458 Function Name: NtUserMapVirtualKeyEx
    Status: Not hooked

    #: 459 Function Name: NtUserMenuItemFromPoint
    Status: Not hooked

    #: 460 Function Name: NtUserMessageCall
    Status: Not hooked

    #: 461 Function Name: NtUserMinMaximize
    Status: Not hooked

    #: 462 Function Name: NtUserMNDragLeave
    Status: Not hooked

    #: 463 Function Name: NtUserMNDragOver
    Status: Not hooked

    #: 464 Function Name: NtUserModifyUserStartupInfoFlags
    Status: Not hooked

    #: 465 Function Name: NtUserMoveWindow
    Status: Not hooked

    #: 466 Function Name: NtUserNotifyIMEStatus
    Status: Not hooked

    #: 467 Function Name: NtUserNotifyProcessCreate
    Status: Not hooked

    #: 468 Function Name: NtUserNotifyWinEvent
    Status: Not hooked

    #: 469 Function Name: NtUserOpenClipboard
    Status: Not hooked

    #: 470 Function Name: NtUserOpenDesktop
    Status: Not hooked

    #: 471 Function Name: NtUserOpenInputDesktop
    Status: Not hooked

    #: 472 Function Name: NtUserOpenWindowStation
    Status: Not hooked

    #: 473 Function Name: NtUserPaintDesktop
    Status: Not hooked

    #: 474 Function Name: NtUserPeekMessage
    Status: Not hooked

    #: 475 Function Name: NtUserPostMessage
    Status: Not hooked

    #: 476 Function Name: NtUserPostThreadMessage
    Status: Not hooked

    #: 477 Function Name: NtUserPrintWindow
    Status: Not hooked

    #: 478 Function Name: NtUserProcessConnect
    Status: Not hooked

    #: 479 Function Name: NtUserQueryInformationThread
    Status: Not hooked

    #: 480 Function Name: NtUserQueryInputContext
    Status: Not hooked

    #: 481 Function Name: NtUserQuerySendMessage
    Status: Not hooked

    #: 482 Function Name: NtUserQueryUserCounters
    Status: Not hooked

    #: 483 Function Name: NtUserQueryWindow
    Status: Not hooked

    #: 484 Function Name: NtUserRealChildWindowFromPoint
    Status: Not hooked

    #: 485 Function Name: NtUserRealInternalGetMessage
    Status: Not hooked

    #: 486 Function Name: NtUserRealWaitMessageEx
    Status: Not hooked

    #: 487 Function Name: NtUserRedrawWindow
    Status: Not hooked

    #: 488 Function Name: NtUserRegisterClassExWOW
    Status: Not hooked

    #: 489 Function Name: NtUserRegisterUserApiHook
    Status: Not hooked

    #: 490 Function Name: NtUserRegisterHotKey
    Status: Not hooked

    #: 491 Function Name: NtUserRegisterRawInputDevices
    Status: Not hooked

    #: 492 Function Name: NtUserRegisterTasklist
    Status: Not hooked

    #: 493 Function Name: NtUserRegisterWindowMessage
    Status: Not hooked

    #: 494 Function Name: NtUserRemoveMenu
    Status: Not hooked

    #: 495 Function Name: NtUserRemoveProp
    Status: Not hooked

    #: 496 Function Name: NtUserResolveDesktop
    Status: Not hooked

    #: 497 Function Name: NtUserResolveDesktopForWOW
    Status: Not hooked

    #: 498 Function Name: NtUserSBGetParms
    Status: Not hooked

    #: 499 Function Name: NtUserScrollDC
    Status: Not hooked

    #: 500 Function Name: NtUserScrollWindowEx
    Status: Not hooked

    #: 501 Function Name: NtUserSelectPalette
    Status: Not hooked

    #: 502 Function Name: NtUserSendInput
    Status: Not hooked

    #: 503 Function Name: NtUserSetActiveWindow
    Status: Not hooked

    #: 504 Function Name: NtUserSetAppImeLevel
    Status: Not hooked

    #: 505 Function Name: NtUserSetCapture
    Status: Not hooked

    #: 506 Function Name: NtUserSetClassLong
    Status: Not hooked

    #: 507 Function Name: NtUserSetClassWord
    Status: Not hooked

    #: 508 Function Name: NtUserSetClipboardData
    Status: Not hooked

    #: 509 Function Name: NtUserSetClipboardViewer
    Status: Not hooked

    #: 510 Function Name: NtUserSetConsoleReserveKeys
    Status: Not hooked

    #: 511 Function Name: NtUserSetCursor
    Status: Not hooked

    #: 512 Function Name: NtUserSetCursorContents
    Status: Not hooked

    #: 513 Function Name: NtUserSetCursorIconData
    Status: Not hooked

    #: 514 Function Name: NtUserSetDbgTag
    Status: Not hooked

    #: 515 Function Name: NtUserSetFocus
    Status: Not hooked

    #: 516 Function Name: NtUserSetImeHotKey
    Status: Not hooked

    #: 517 Function Name: NtUserSetImeInfoEx
    Status: Not hooked

    #: 518 Function Name: NtUserSetImeOwnerWindow
    Status: Not hooked

    #: 519 Function Name: NtUserSetInformationProcess
    Status: Not hooked

    #: 520 Function Name: NtUserSetInformationThread
    Status: Not hooked

    #: 521 Function Name: NtUserSetInternalWindowPos
    Status: Not hooked

    #: 522 Function Name: NtUserSetKeyboardState
    Status: Not hooked

    #: 523 Function Name: NtUserSetLogonNotifyWindow
    Status: Not hooked

    #: 524 Function Name: NtUserSetMenu
    Status: Not hooked

    #: 525 Function Name: NtUserSetMenuContextHelpId
    Status: Not hooked

    #: 526 Function Name: NtUserSetMenuDefaultItem
    Status: Not hooked

    #: 527 Function Name: NtUserSetMenuFlagRtoL
    Status: Not hooked

    #: 528 Function Name: NtUserSetObjectInformation
    Status: Not hooked

    #: 529 Function Name: NtUserSetParent
    Status: Not hooked

    #: 530 Function Name: NtUserSetProcessWindowStation
    Status: Not hooked

    #: 531 Function Name: NtUserSetProp
    Status: Not hooked

    #: 532 Function Name: NtUserSetRipFlags
    Status: Not hooked

    #: 533 Function Name: NtUserSetScrollInfo
    Status: Not hooked

    #: 534 Function Name: NtUserSetShellWindowEx
    Status: Not hooked

    #: 535 Function Name: NtUserSetSysColors
    Status: Not hooked

    #: 536 Function Name: NtUserSetSystemCursor
    Status: Not hooked

    #: 537 Function Name: NtUserSetSystemMenu
    Status: Not hooked

    #: 538 Function Name: NtUserSetSystemTimer
    Status: Not hooked

    #: 539 Function Name: NtUserSetThreadDesktop
    Status: Not hooked

    #: 540 Function Name: NtUserSetThreadLayoutHandles
    Status: Not hooked

    #: 541 Function Name: NtUserSetThreadState
    Status: Not hooked

    #: 542 Function Name: NtUserSetTimer
    Status: Not hooked

    #: 543 Function Name: NtUserSetWindowFNID
    Status: Not hooked

    #: 544 Function Name: NtUserSetWindowLong
    Status: Not hooked

    #: 545 Function Name: NtUserSetWindowPlacement
    Status: Not hooked

    #: 546 Function Name: NtUserSetWindowPos
    Status: Not hooked

    #: 547 Function Name: NtUserSetWindowRgn
    Status: Not hooked

    #: 548 Function Name: NtUserSetWindowsHookAW
    Status: Not hooked

    #: 549 Function Name: NtUserSetWindowsHookEx
    Status: Not hooked

    #: 550 Function Name: NtUserSetWindowStationUser
    Status: Not hooked

    #: 551 Function Name: NtUserSetWindowWord
    Status: Not hooked

    #: 552 Function Name: NtUserSetWinEventHook
    Status: Not hooked

    #: 553 Function Name: NtUserShowCaret
    Status: Not hooked

    #: 554 Function Name: NtUserShowScrollBar
    Status: Not hooked

    #: 555 Function Name: NtUserShowWindow
    Status: Not hooked

    #: 556 Function Name: NtUserShowWindowAsync
    Status: Not hooked

    #: 557 Function Name: NtUserSoundSentry
    Status: Not hooked

    #: 558 Function Name: NtUserSwitchDesktop
    Status: Not hooked

    #: 559 Function Name: NtUserSystemParametersInfo
    Status: Not hooked

    #: 560 Function Name: NtUserTestForInteractiveUser
    Status: Not hooked

    #: 561 Function Name: NtUserThunkedMenuInfo
    Status: Not hooked

    #: 562 Function Name: NtUserThunkedMenuItemInfo
    Status: Not hooked

    #: 563 Function Name: NtUserToUnicodeEx
    Status: Not hooked

    #: 564 Function Name: NtUserTrackMouseEvent
    Status: Not hooked

    #: 565 Function Name: NtUserTrackPopupMenuEx
    Status: Not hooked

    #: 566 Function Name: NtUserCalcMenuBar
    Status: Not hooked

    #: 567 Function Name: NtUserPaintMenuBar
    Status: Not hooked

    #: 568 Function Name: NtUserTranslateAccelerator
    Status: Not hooked

    #: 569 Function Name: NtUserTranslateMessage
    Status: Not hooked

    #: 570 Function Name: NtUserUnhookWindowsHookEx
    Status: Not hooked

    #: 571 Function Name: NtUserUnhookWinEvent
    Status: Not hooked

    #: 572 Function Name: NtUserUnloadKeyboardLayout
    Status: Not hooked

    #: 573 Function Name: NtUserUnlockWindowStation
    Status: Not hooked

    #: 574 Function Name: NtUserUnregisterClass
    Status: Not hooked

    #: 575 Function Name: NtUserUnregisterUserApiHook
    Status: Not hooked

    #: 576 Function Name: NtUserUnregisterHotKey
    Status: Not hooked

    #: 577 Function Name: NtUserUpdateInputContext
    Status: Not hooked

    #: 578 Function Name: NtUserUpdateInstance
    Status: Not hooked

    #: 579 Function Name: NtUserUpdateLayeredWindow
    Status: Not hooked

    #: 580 Function Name: NtUserGetLayeredWindowAttributes
    Status: Not hooked

    #: 581 Function Name: NtUserSetLayeredWindowAttributes
    Status: Not hooked

    #: 582 Function Name: NtUserUpdatePerUserSystemParameters
    Status: Not hooked

    #: 583 Function Name: NtUserUserHandleGrantAccess
    Status: Not hooked

    #: 584 Function Name: NtUserValidateHandleSecure
    Status: Not hooked

    #: 585 Function Name: NtUserValidateRect
    Status: Not hooked

    #: 586 Function Name: NtUserValidateTimerCallback
    Status: Not hooked

    #: 587 Function Name: NtUserVkKeyScanEx
    Status: Not hooked

    #: 588 Function Name: NtUserWaitForInputIdle
    Status: Not hooked

    #: 589 Function Name: NtUserWaitForMsgAndEvent
    Status: Not hooked

    #: 590 Function Name: NtUserWaitMessage
    Status: Not hooked

    #: 591 Function Name: NtUserWin32PoolAllocationStats
    Status: Not hooked

    #: 592 Function Name: NtUserWindowFromPoint
    Status: Not hooked

    #: 593 Function Name: NtUserYieldTask
    Status: Not hooked

    #: 594 Function Name: NtUserRemoteConnect
    Status: Not hooked

    #: 595 Function Name: NtUserRemoteRedrawRectangle
    Status: Not hooked

    #: 596 Function Name: NtUserRemoteRedrawScreen
    Status: Not hooked

    #: 597 Function Name: NtUserRemoteStopScreenUpdates
    Status: Not hooked

    #: 598 Function Name: NtUserCtxDisplayIOCtl
    Status: Not hooked

    #: 599 Function Name: NtGdiEngAssociateSurface
    Status: Not hooked

    #: 600 Function Name: NtGdiEngCreateBitmap
    Status: Not hooked

    #: 601 Function Name: NtGdiEngCreateDeviceSurface
    Status: Not hooked

    #: 602 Function Name: NtGdiEngCreateDeviceBitmap
    Status: Not hooked

    #: 603 Function Name: NtGdiEngCreatePalette
    Status: Not hooked

    #: 604 Function Name: NtGdiEngComputeGlyphSet
    Status: Not hooked

    #: 605 Function Name: NtGdiEngCopyBits
    Status: Not hooked

    #: 606 Function Name: NtGdiEngDeletePalette
    Status: Not hooked

    #: 607 Function Name: NtGdiEngDeleteSurface
    Status: Not hooked

    #: 608 Function Name: NtGdiEngEraseSurface
    Status: Not hooked

    #: 609 Function Name: NtGdiEngUnlockSurface
    Status: Not hooked

    #: 610 Function Name: NtGdiEngLockSurface
    Status: Not hooked

    #: 611 Function Name: NtGdiEngBitBlt
    Status: Not hooked

    #: 612 Function Name: NtGdiEngStretchBlt
    Status: Not hooked

    #: 613 Function Name: NtGdiEngPlgBlt
    Status: Not hooked

    #: 614 Function Name: NtGdiEngMarkBandingSurface
    Status: Not hooked

    #: 615 Function Name: NtGdiEngStrokePath
    Status: Not hooked

    #: 616 Function Name: NtGdiEngFillPath
    Status: Not hooked

    #: 617 Function Name: NtGdiEngStrokeAndFillPath
    Status: Not hooked

    #: 618 Function Name: NtGdiEngPaint
    Status: Not hooked

    #: 619 Function Name: NtGdiEngLineTo
    Status: Not hooked

    #: 620 Function Name: NtGdiEngAlphaBlend
    Status: Not hooked

    #: 621 Function Name: NtGdiEngGradientFill
    Status: Not hooked

    #: 622 Function Name: NtGdiEngTransparentBlt
    Status: Not hooked

    #: 623 Function Name: NtGdiEngTextOut
    Status: Not hooked

    #: 624 Function Name: NtGdiEngStretchBltROP
    Status: Not hooked

    #: 625 Function Name: NtGdiXLATEOBJ_cGetPalette
    Status: Not hooked

    #: 626 Function Name: NtGdiXLATEOBJ_iXlate
    Status: Not hooked

    #: 627 Function Name: NtGdiXLATEOBJ_hGetColorTransform
    Status: Not hooked

    #: 628 Function Name: NtGdiCLIPOBJ_bEnum
    Status: Not hooked

    #: 629 Function Name: NtGdiCLIPOBJ_cEnumStart
    Status: Not hooked

    #: 630 Function Name: NtGdiCLIPOBJ_ppoGetPath
    Status: Not hooked

    #: 631 Function Name: NtGdiEngDeletePath
    Status: Not hooked

    #: 632 Function Name: NtGdiEngCreateClip
    Status: Not hooked

    #: 633 Function Name: NtGdiEngDeleteClip
    Status: Not hooked

    #: 634 Function Name: NtGdiBRUSHOBJ_ulGetBrushColor
    Status: Not hooked

    #: 635 Function Name: NtGdiBRUSHOBJ_pvAllocRbrush
    Status: Not hooked

    #: 636 Function Name: NtGdiBRUSHOBJ_pvGetRbrush
    Status: Not hooked

    #: 637 Function Name: NtGdiBRUSHOBJ_hGetColorTransform
    Status: Not hooked

    #: 638 Function Name: NtGdiXFORMOBJ_bApplyXform
    Status: Not hooked

    #: 639 Function Name: NtGdiXFORMOBJ_iGetXform
    Status: Not hooked

    #: 640 Function Name: NtGdiFONTOBJ_vGetInfo
    Status: Not hooked

    #: 641 Function Name: NtGdiFONTOBJ_pxoGetXform
    Status: Not hooked

    #: 642 Function Name: NtGdiFONTOBJ_cGetGlyphs
    Status: Not hooked

    #: 643 Function Name: NtGdiFONTOBJ_pifi
    Status: Not hooked

    #: 644 Function Name: NtGdiFONTOBJ_pfdg
    Status: Not hooked

    #: 645 Function Name: NtGdiFONTOBJ_pQueryGlyphAttrs
    Status: Not hooked

    #: 646 Function Name: NtGdiFONTOBJ_pvTrueTypeFontFile
    Status: Not hooked

    #: 647 Function Name: NtGdiFONTOBJ_cGetAllGlyphHandles
    Status: Not hooked

    #: 648 Function Name: NtGdiSTROBJ_bEnum
    Status: Not hooked

    #: 649 Function Name: NtGdiSTROBJ_bEnumPositionsOnly
    Status: Not hooked

    #: 650 Function Name: NtGdiSTROBJ_bGetAdvanceWidths
    Status: Not hooked

    #: 651 Function Name: NtGdiSTROBJ_vEnumStart
    Status: Not hooked

    #: 652 Function Name: NtGdiSTROBJ_dwGetCodePage
    Status: Not hooked

    #: 653 Function Name: NtGdiPATHOBJ_vGetBounds
    Status: Not hooked

    #: 654 Function Name: NtGdiPATHOBJ_bEnum
    Status: Not hooked

    #: 655 Function Name: NtGdiPATHOBJ_vEnumStart
    Status: Not hooked

    #: 656 Function Name: NtGdiPATHOBJ_vEnumStartClipLines
    Status: Not hooked

    #: 657 Function Name: NtGdiPATHOBJ_bEnumClipLines
    Status: Not hooked

    #: 658 Function Name: NtGdiGetDhpdev
    Status: Not hooked

    #: 659 Function Name: NtGdiEngCheckAbort
    Status: Not hooked

    #: 660 Function Name: NtGdiHT_Get8BPPFormatPalette
    Status: Not hooked

    #: 661 Function Name: NtGdiHT_Get8BPPMaskPalette
    Status: Not hooked

    #: 662 Function Name: NtGdiUpdateTransform
    Status: Not hooked

    #: 663 Function Name: NtGdiSetPUMPDOBJ
    Status: Not hooked

    #: 664 Function Name: NtGdiBRUSHOBJ_DeleteRbrush
    Status: Not hooked

    #: 665 Function Name: NtGdiUnmapMemFont
    Status: Not hooked

    #: 666 Function Name: NtGdiDrawStream
    Status: Not hooked

    Hidden/Locked Files
    -------------------
    Path: C:\hiberfil.sys
    Status: Locked to the Windows API!

    Path: c:\documents and settings\d\local settings\temp\etilqs_a1mj2xf4dcxiomzphijc
    Status: Allocation size mismatch (API: 32768, Raw: 0)

    Path: c:\documents and settings\d\local settings\temp\etilqs_zpm9zracgetjug94zcnt
    Status: Allocation size mismatch (API: 16384, Raw: 0)

    Path: C:\Documents and Settings\D\Local Settings\Apps\2.0\85KORZ5R.HXE\X2G9CB0H.E4D\manifests\clickonce_bootstrap.exe.cdf-ms
    Status: Locked to the Windows API!

    Path: C:\Documents and Settings\D\Local Settings\Apps\2.0\85KORZ5R.HXE\X2G9CB0H.E4D\manifests\clickonce_bootstrap.exe.manifest
    Status: Locked to the Windows API!

  8. #8
    Elite Member TonyT's Avatar
    Join Date
    Jan 2000
    Location
    Fairfax, VA
    Posts
    10,336
    These are OK, put there by Google Earth:
    Path: C:\Documents and Settings\D\Local Settings\Apps\2.0\85KORZ5R.HXE\X2G9CB0H.E4D\manifests\clickonce_bootstrap.exe.cdf-ms
    Status: Locked to the Windows API!

    Path: C:\Documents and Settings\D\Local Settings\Apps\2.0\85KORZ5R.HXE\X2G9CB0H.E4D\manifests\clickonce_bootstrap.exe.manifest
    Status: Locked to the Windows API!

    These are OK, put there by Firefox sqlite databases.
    Path: c:\documents and settings\d\local settings\temp\etilqs_a1mj2xf4dcxiomzphijc
    Status: Allocation size mismatch (API: 32768, Raw: 0)

    Path: c:\documents and settings\d\local settings\temp\etilqs_zpm9zracgetjug94zcnt
    Status: Allocation size mismatch (API: 16384, Raw: 0)

    Download ComboFix and save it to your desktop. Boot into Safe Mode with Networking and run ComboFix. Let it update and also install the Windows Recovery Console. Post the log here.

    note: ComboFix will reboot the comp, be sure to start it in Safe Mode on the reboot.
    No one has any right to force data on you
    and command you to believe it or else.
    If it is not true for you, it isn't true.

    LRH

Similar Threads

  1. New hijack log, new problem :(
    By nodeuce in forum Network Security
    Replies: 1
    Last Post: 01-22-09, 03:40 PM
  2. Please check my Hijack log
    By BOWTYE8 in forum Software Forum
    Replies: 7
    Last Post: 11-17-08, 04:47 PM
  3. I have no clue...router breeched?
    By cig19335 in forum Wireless Networks & Routers
    Replies: 2
    Last Post: 10-29-08, 09:31 AM
  4. Re: Log Indicates Router Restart
    By Franc Zabkar in forum ms.public.windows.networking.wireless
    Replies: 0
    Last Post: 10-09-08, 03:14 PM
  5. Hijack This Log - Please Look
    By Qui-Gon John in forum Network Security
    Replies: 19
    Last Post: 12-30-07, 04:06 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •