GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-07-20 18:01:09
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\00000063 ST3808110AS rev.2AAA
Running: kim7dmoq.exe; Driver: C:\DOCUME~1\ADMINI~1\USTAWI~1\Temp\pgrdiaow.sys


---- System - GMER 1.0.15 ----

SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwAssignProcessToJobObject [0xF0A83610]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwDebugActiveProcess [0xF0A83C10]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwDuplicateObject [0xF0A83730]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwOpenProcess [0xF0A834B0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwOpenThread [0xF0A83570]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwProtectVirtualMemory [0xF0A836D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwQueueApcThread [0xF0A83790]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwSetContextThread [0xF0A83690]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwSetInformationThread [0xF0A83650]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwSetSecurityObject [0xF0A837D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwSuspendProcess [0xF0A83510]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwSuspendThread [0xF0A83590]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwTerminateProcess [0xF0A834D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwTerminateThread [0xF0A835D0]
SSDT            \SystemRoot\system32\DRIVERS\ehdrv.sys (ESET Helper driver/ESET)               ZwWriteVirtualMemory [0xF0A83750]

---- Kernel code sections - GMER 1.0.15 ----

.text           C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                       section is writeable [0xF6C3C360, 0x24BBAD, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text           E:\Programy\Antywirus\ekrn.exe[1196] kernel32.dll!SetUnhandledExceptionFilter  7C8449FD 4 Bytes  [C2, 04, 00, 00]

---- Devices - GMER 1.0.15 ----

AttachedDevice  \Driver\Tcpip \Device\Tcp                                                      epfwtdir.sys (ESET Antivirus Network Redirector/ESET)

---- EOF - GMER 1.0.15 ----