GMER 1.0.15.15641 - http://www.gmer.net
Rootkit quick scan 2012-04-03 21:22:18
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-7  rev.
Running: qps8qr53.exe; Driver: C:\DOCUME~1\KRZYSZ~1\USTAWI~1\Temp\pxtdqpoc.sys


---- Disk sectors - GMER 1.0.15 ----

Disk            \Device\Harddisk0\DR0                                                                  sector 00: rootkit-like behavior

---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)  ZwEnumerateKey [0xB0F5928E]
SSDT            \SystemRoot\System32\Drivers\aswSnx.SYS (avast! Virtualization Driver/AVAST Software)  ZwEnumerateValueKey [0xB0F590F9]

Code            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)  ZwCreateProcessEx [0xB101ED92]
Code            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)  ObInsertObject
Code            \SystemRoot\System32\Drivers\aswSP.SYS (avast! self protection module/AVAST Software)  ObMakeTemporaryObject

---- Devices - GMER 1.0.15 ----

Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdePort0                                    894300AE
Device          \Driver\atapi \Device\Ide\IdePort0                                                     8942FF76
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdePort1                                    894300AE
Device          \Driver\atapi \Device\Ide\IdePort1                                                     8942FF76
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdePort2                                    894300AE
Device          \Driver\atapi \Device\Ide\IdePort2                                                     8942FF76
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdeDeviceP2T0L0-7                           894300AE
Device          \Driver\atapi \Device\Ide\IdeDeviceP2T0L0-7                                            8942FF76
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdePort3                                    894300AE
Device          \Driver\atapi \Device\Ide\IdePort3                                                     8942FF76
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdePort4                                    894300AE
Device          \Driver\atapi \Device\Ide\IdePort4                                                     8942FF76
Device          \Driver\atapi -> DriverStartIo \Device\Ide\IdeDeviceP4T0L0-14                          894300AE
Device          \Driver\atapi \Device\Ide\IdeDeviceP4T0L0-14                                           8942FF76
Device          \FileSystem\Ntfs \Ntfs                                                                 aswSP.SYS (avast! self protection module/AVAST Software)

AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                 crpf.sys (COMODO Safe Delete Filter/COMODO Security Solutions Inc.)
AttachedDevice  \FileSystem\Ntfs \Ntfs                                                                 aswMon2.SYS (avast! File System Filter Driver for Windows XP/AVAST Software)
AttachedDevice  \Driver\Tcpip \Device\Ip                                                               aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
AttachedDevice  \Driver\Tcpip \Device\Tcp                                                              aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
AttachedDevice  \Driver\Tcpip \Device\Udp                                                              aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)
AttachedDevice  \Driver\Tcpip \Device\RawIp                                                            aswTdi.SYS (avast! TDI Filter Driver/AVAST Software)

---- Processes - GMER 1.0.15 ----

Process         C:\Program Files\Internet Explorer\iexplore.exe (*** hidden *** )                      2296                                                                          
Process         C:\Program Files\Internet Explorer\iexplore.exe (*** hidden *** )                      2836                                                                          

---- EOF - GMER 1.0.15 ----