GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-08-02 02:29:22
Windows 5.1.2600 Dodatek Service Pack 3
Running: zi5xp1vt.exe; Driver: C:\DOCUME~1\KRZYSZ~1\USTAWI~1\Temp\pwrdrpow.sys


---- System - GMER 1.0.15 ----

SSDT            Lbd.sys (Boot Driver/Lavasoft AB)       ZwCreateKey [0xBA0F887E]
SSDT            Lbd.sys (Boot Driver/Lavasoft AB)       ZwSetValueKey [0xBA0F8BFE]

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                  InCDrec.SYS (InCD File System Recognizer/Nero AG)
AttachedDevice  \FileSystem\Ntfs \Ntfs                  PQV2i.sys (StorageCraft Volume Snap-Shot/StorageCraft)
AttachedDevice  \Driver\Tcpip \Device\Tcp               Lbd.sys (Boot Driver/Lavasoft AB)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume1  hotcore3.sys (Hotbackup helper driver/Paragon Software Group)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume1  snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume2  hotcore3.sys (Hotbackup helper driver/Paragon Software Group)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume2  snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume3  hotcore3.sys (Hotbackup helper driver/Paragon Software Group)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume3  snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume4  hotcore3.sys (Hotbackup helper driver/Paragon Software Group)
AttachedDevice  \Driver\Ftdisk \Device\HarddiskVolume4  snapman.sys (Acronis Snapshot API/Acronis)
AttachedDevice  \FileSystem\Fastfat \Fat                fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

---- Disk sectors - GMER 1.0.15 ----

Disk            \Device\Harddisk0\DR0                   sector 62: copy of MBR

---- EOF - GMER 1.0.15 ----