GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-06-01 17:33:52
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 Hitachi_HDT721032SLA360 rev.ST2OA31B
Running: ndz8vj2l.exe; Driver: C:\DOCUME~1\user\USTAWI~1\Temp\kwlyipob.sys


---- Kernel code sections - GMER 1.0.15 ----

?               C:\WINDOWS\system32\Drivers\PROCEXP113.SYS                                            Nie można odnaleźć określonego pliku. !

---- User code sections - GMER 1.0.15 ----

.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[976] USER32.dll!SetWindowLongA  7E37C29D 5 Bytes  JMP 10665EE6 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[976] USER32.dll!SetWindowLongW  7E37C2BB 5 Bytes  JMP 10665E78 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[976] USER32.dll!GetWindowInfo   7E37C49C 5 Bytes  JMP 10454822 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\plugin-container.exe[976] USER32.dll!TrackPopupMenu  7E3B531E 5 Bytes  JMP 10454DD6 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[1776] ntdll.dll!LdrLoadDll               7C91632D 5 Bytes  JMP 0126C930 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[1776] kernel32.dll!VirtualAlloc          7C809AF1 5 Bytes  JMP 0149E0AA C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[1776] kernel32.dll!MapViewOfFile         7C80B9A5 5 Bytes  JMP 0149E083 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Program Files\Mozilla Firefox\firefox.exe[1776] GDI32.dll!CreateDIBSection         77F19E19 5 Bytes  JMP 0149E00D C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text           C:\Kies\External\FirmwareUpdate\KiesPDLR.exe[3820] ntdll.dll!DbgUiRemoteBreakin       7C9520EC 1 Byte  [C3]

---- Devices - GMER 1.0.15 ----

Device                                                                                                mrxsmb.sys (Windows NT SMB Minirdr/Microsoft Corporation)
Device                                                                                                Fastfat.SYS (Fast FAT File System Driver/Microsoft Corporation)

AttachedDevice                                                                                        fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

Device                                                                                                InCDFs.sys (InCD File System Driver/Nero AG)

---- EOF - GMER 1.0.15 ----