GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-01-14 18:44:35
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST9120822A rev.3.ALA
Running: rkx3huzk.exe; Driver: C:\DOCUME~1\JA\USTAWI~1\Temp\pxtdapow.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                         ZwClose [0xAA3B4618]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwCreateKey [0xF77206E6]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwCreateProcess [0xF76FEF68]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwCreateProcessEx [0xF76FF230]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwDeleteKey [0xF77210A0]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwDeleteValueKey [0xF772142A]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                         ZwDuplicateObject [0xAA3B40AC]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwOpenKey [0xF771F924]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                         ZwOpenProcess [0xAA3B3FEC]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                         ZwOpenThread [0xAA3B4050]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                         ZwQueryValueKey [0xAA3B46CE]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwRenameKey [0xF772196E]
SSDT            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/ALWIL Software)                         ZwRestoreKey [0xAA3B468E]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwSetValueKey [0xF7720AA4]
SSDT            PCTCore.sys (PC Tools KDS Core Driver/PC Tools)                                                               ZwTerminateProcess [0xF76FE9D8]

---- Kernel code sections - GMER 1.0.15 ----

init            C:\WINDOWS\system32\drivers\tifm21.sys                                                                        entry point in "init" section [0xF6D0BDBF]
.INIT           C:\WINDOWS\System32\drivers\afd.sys                                                                           entry point in ".INIT" section [0xF78E3A22]

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\PC Tools Security\pctsAuxs.exe[1800] kernel32.dll!CreateThread + 1A                          7C8106F1 4 Bytes  CALL 0044BEE1 C:\Program Files\PC Tools Security\pctsAuxs.exe (PC Tools Security Service/PC Tools)

---- User IAT/EAT - GMER 1.0.15 ----

IAT             C:\WINDOWS\system32\services.exe[476] @ C:\WINDOWS\system32\services.exe [ADVAPI32.dll!CreateProcessAsUserW]  003D0002
IAT             C:\WINDOWS\system32\services.exe[476] @ C:\WINDOWS\system32\services.exe [KERNEL32.dll!CreateProcessW]        003D0000

---- Devices - GMER 1.0.15 ----

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                                        aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice  \Driver\Tcpip \Device\Ip                                                                                      aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                                                     aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                                                     aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                                                   aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                      fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice  \FileSystem\Fastfat \Fat                                                                                      aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)

Device          \Driver\00000951 \GLOBAL??\ACPI#PNP0303#2&da1a3ff&0                                                           866DAB80

---- EOF - GMER 1.0.15 ----