GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-09-13 18:27:32
Windows 5.1.2600 Dodatek Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 SAMSUNG_HD103UJ rev.1AA01113
Running: 220qkyhz.exe; Driver: C:\DOCUME~1\Amadeusz\USTAWI~1\Temp\agtcifow.sys


---- Kernel code sections - GMER 1.0.15 ----

.text  C:\WINDOWS\system32\DRIVERS\nv4_mini.sys                                                          section is writeable [0xB706D3C0, 0x9B091A, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text  C:\Program Files\Mozilla Firefox\firefox.exe[3640] ntdll.dll!LdrLoadDll                           7C91632D 5 Bytes  JMP 01210C00 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3640] kernel32.dll!lstrlenW + 43                     7C809AEC 7 Bytes  JMP 01447B4C C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3640] kernel32.dll!MapViewOfFileEx + 6A              7C80B9A0 7 Bytes  JMP 01447B29 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3640] kernel32.dll!ValidateLocale + B130             7C844958 7 Bytes  JMP 01213FAC C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\firefox.exe[3640] GDI32.dll!SetDIBitsToDevice + 20A              77F19E14 7 Bytes  JMP 01447AAA C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\plugin-container.exe[4076] USER32.dll!DefWindowProcA + 11A       7E37C298 7 Bytes  JMP 105CDF63 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\plugin-container.exe[4076] USER32.dll!SetWindowLongA + 19        7E37C2B6 7 Bytes  JMP 105CDEF2 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\plugin-container.exe[4076] USER32.dll!GetWindowInfo              7E37C49C 5 Bytes  JMP 10414536 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text  C:\Program Files\Mozilla Firefox\plugin-container.exe[4076] USER32.dll!GetMenuContextHelpId + 1A  7E3B5319 7 Bytes  JMP 10414B35 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- EOF - GMER 1.0.15 ----