86F491E8, 84EEE1E8...?

Discussion in 'malware problems & news' started by Lovecraft, Jun 1, 2008.

Thread Status:
Not open for further replies.
  1. Lovecraft

    Lovecraft Registered Member

    Joined:
    Mar 7, 2008
    Posts:
    13
    What could those mean? Some scanners, e.g. GMER, list them as found. This is what AVZ lists:

    \FileSystem\ntfs[IRP_MJ_CREATE] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_CLOSE] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_WRITE] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_QUERY_INFORMATION] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_SET_INFORMATION] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_QUERY_EA] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_SET_EA] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_QUERY_VOLUME_INFORMATION] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_SET_VOLUME_INFORMATION] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_DIRECTORY_CONTROL] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_FILE_SYSTEM_CONTROL] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_DEVICE_CONTROL] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_LOCK_CONTROL] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_QUERY_SECURITY] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_SET_SECURITY] = 86F491E8 -> hook not defined
    \FileSystem\ntfs[IRP_MJ_PNP] = 86F491E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_CREATE] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_CLOSE] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_WRITE] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_QUERY_INFORMATION] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_SET_INFORMATION] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_QUERY_EA] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_SET_EA] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_QUERY_VOLUME_INFORMATION] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_SET_VOLUME_INFORMATION] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_DIRECTORY_CONTROL] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_FILE_SYSTEM_CONTROL] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_DEVICE_CONTROL] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_LOCK_CONTROL] = 84EEE1E8 -> hook not defined
    \FileSystem\FastFat[IRP_MJ_PNP] = 84EEE1E8 -> hook not defined
     
Thread Status:
Not open for further replies.