GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-08-14 13:01:46
Windows 5.1.2600 Dodatek Service Pack 3
Running: 0wnqkd4g.exe; Driver: C:\DOCUME~1\Monia\USTAWI~1\Temp\pxtdypod.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwAssignProcessToJobObject [0xB1D11610]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwDebugActiveProcess [0xB1D11C10]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwDuplicateObject [0xB1D11730]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwOpenProcess [0xB1D114B0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwOpenThread [0xB1D11570]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwProtectVirtualMemory [0xB1D116D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSetContextThread [0xB1D11690]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSetInformationThread [0xB1D11650]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSetSecurityObject [0xB1D117D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSuspendProcess [0xB1D11510]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwSuspendThread [0xB1D11590]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwTerminateProcess [0xB1D114D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwTerminateThread [0xB1D115D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)                                   ZwWriteVirtualMemory [0xB1D11750]

---- Kernel code sections - GMER 1.0.15 ----

?               Combo-Fix.sys                                                                                      Nie można odnaleźć określonego pliku. !
.text           C:\WINDOWS\system32\DRIVERS\ati2mtag.sys                                                           section is writeable [0xBA30A000, 0x1C5D38, 0xE8000020]
?               C:\DOCUME~1\Monia\USTAWI~1\Temp\mbr.sys                                                            Nie można odnaleźć określonego pliku. !
?               C:\ComboFix\catchme.sys                                                                            System nie może odnaleźć określonej ścieżki. !
?               C:\WINDOWS\system32\Drivers\PROCEXP113.SYS                                                         Nie można odnaleźć określonego pliku. !

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[732] kernel32.dll!SetUnhandledExceptionFilter  7C8449FD 4 Bytes  [C2, 04, 00, 00]
.text           C:\Program Files\Mozilla Firefox\firefox.exe[2068] ntdll.dll!LdrLoadDll                            7C9163A3 5 Bytes  JMP 004013F0 C:\Program Files\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                             eamon.sys (Amon monitor/ESET)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                          epfwtdir.sys (ESET Antivirus Network Redirector/ESET)

---- EOF - GMER 1.0.15 ----